Functions — github.com/DFIR-ORC/dfir-orc

CodeHub MCPcopy Create free account

hub / github.com/DFIR-ORC/dfir-orc / functions

Functions5,324 in github.com/DFIR-ORC/dfir-orc

⨍ Functions 5,324◇ Types & classes 1,348

↓ 3 callersMethodSetKeyword

src/OrcCommand/Command/WolfLauncher/Outcome.h:117

↓ 3 callersMethodSetNewBottom

src/OrcLib/CircularStorage.h:177

↓ 3 callersMethodSetOutput

src/OrcLib/XmlOutputWriter.cpp:31

↓ 3 callersMethodSetShadow

src/OrcLib/Location.h:58

↓ 3 callersMethodShouldUpload

src/OrcCommand/Command/WolfLauncher/WolfExecution.h:243

↓ 3 callersMethodSize

src/OrcLib/Filesystem/Ntfs/ShadowCopy/CatalogEntry.h:81

↓ 3 callersMethodSize

src/OrcLib/Archive/Item.cpp:35

↓ 3 callersMethodStatus

src/OrcLib/ProcessRedirect.h:66

↓ 3 callersMethodStreamTableFactory

src/OrcLib/TableOutputExtension.h:43

↓ 3 callersFunctionToString

src/OrcCommand/Command/GetThis/GetThis_Output.cpp:106

↓ 3 callersFunctionToString

src/OrcLib/Filesystem/Ntfs/Compression/WofAlgorithm.cpp:59

↓ 3 callersFunctionToolName

src/OrcCommand/Command/FatInfo/FatInfo.h:65

↓ 3 callersFunctionTransform

src/OrcCapsule/Utilities/Crypto.cpp:33

↓ 3 callersMethodVerify

src/OrcLib/Authenticode.cpp:701

↓ 3 callersMethodWriteConfig

src/OrcLib/Configuration/ConfigFileWriter.cpp:111

↓ 3 callersMethodWriteNamedAttributes

src/OrcLib/XmlOutputWriter.cpp:582

↓ 3 callersMethodWriteNamedFormated

src/OrcLib/StructuredOutput.h:195

↓ 3 callersFunctionZstdGetCompressRatio

src/OrcCapsule/Utilities/Compression.cpp:216

↓ 3 callersMethodblockSize

src/OrcLib/YaraScanner.h:54

↓ 3 callersMethodformat

src/OrcLib/Text/Fmt/GUID.h:23

↓ 3 callersFunctionget

src/OrcLib/LogParserDataReader.cpp:85

↓ 3 callersMethodgetSampleName

src/OrcCommand/Command/GetSectors/GetSectors_Run.cpp:381

↓ 3 callersMethodget_raw

src/OrcLib/Buffer.h:831

↓ 3 callersFunctionhashCaseInsensitive

src/OrcLib/CaseInsensitive.h:110

↓ 3 callersMethodpeek

<summary> Return the item at the head of the queue, without dequeuing </summary> <returns> Returns a pointer to the message found at the head of the q

src/OrcLib/MessageQueue.h:80

↓ 3 callersMethodset

src/OrcLib/Buffer.h:509

↓ 3 callersMethodyr_compiler_get_rules

src/OrcLib/YaraStaticExtension.cpp:47

↓ 3 callersMethod~MFTRecord

src/OrcLib/MFTRecord.h:141

↓ 2 callersMethodAddRedirection

src/OrcLib/CommandExecute.cpp:188

↓ 2 callersMethodAddRef

tools/rcedit/src/utils/guard.h:260

↓ 2 callersMethodAddRules

src/OrcLib/YaraScanner.cpp:207

↓ 2 callersMethodAddToDefaultFacilities

src/OrcLib/Log/Logger.h:410

↓ 2 callersMethodAlgorithm

src/OrcLib/Filesystem/Ntfs/Compression/WofChunks.h:39

↓ 2 callersMethodAllocatedSize

src/OrcLib/MftRecordAttribute.cpp:207

↓ 2 callersFunctionApplyConsoleBacktraceTrigger

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:415

↓ 2 callersFunctionApplyConsoleSinkLevel

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:388

↓ 2 callersFunctionApplyFileBacktraceTrigger

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:479

↓ 2 callersFunctionApplyFileSinkLevel

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:456

↓ 2 callersFunctionApplySyslogSinkLevel

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:438

↓ 2 callersMethodAsHexString

src/OrcLib/Buffer.h:939

↓ 2 callersFunctionBytesToHex

src/OrcCapsule/Utilities/Crypto.cpp:133

↓ 2 callersMethodCallbackCalled

src/OrcLib/MFTRecord.h:65

↓ 2 callersFunctionCheckFAT32Vbr

tests/OrcLibTest/partition_table_test.cpp:1217

↓ 2 callersMethodCheckYara

src/OrcLib/FileFind.cpp:579

↓ 2 callersFunctionClampComponent

src/OrcLib/USNJournalWalkerBase.cpp:21

↓ 2 callersMethodClose

src/OrcLib/Archive/Appender.h:126

↓ 2 callersFunctionCloseHandleHelper

src/OrcLib/DebugAgent.cpp:146

↓ 2 callersMethodCollectionReadLength

src/OrcLib/FileFind.h:154

↓ 2 callersMethodCollectionTime

src/OrcLib/FileFind.h:153

↓ 2 callersFunctionCompileYaraRule

src/OrcLib/EmbeddedResource_Embed.cpp:909

↓ 2 callersFunctionCompress

tools/rcedit/src/cmd/set/cmd_set.cpp:156

↓ 2 callersFunctionConfigurationExtension

src/OrcCommand/Command/DD/DD.h:67

↓ 2 callersMethodConfigure

src/OrcCommand/UtilitiesMain.cpp:177

↓ 2 callersFunctionConvertExecutionTime

src/OrcCommand/Command/WolfLauncher/WolfTask.cpp:21

↓ 2 callersMethodConvertFromSDDL

src/OrcLib/SecurityDescriptor.cpp:18

↓ 2 callersFunctionConvertToBase64

src/OrcLib/Convert.h:129

↓ 2 callersFunctionCopyFileAndMarkForRebootRemoval

src/OrcCapsule/Utilities/Process.cpp:23

↓ 2 callersFunctionCreateCsvWriter

src/OrcCommand/Command/GetThis/GetThis_Run.cpp:329

↓ 2 callersMethodCreateDecompressor

src/OrcLib/CompressAPIExtension.h:89

↓ 2 callersMethodCreateObject

src/OrcLib/ZipLibrary.cpp:137

↓ 2 callersMethodCreateXmlReader

src/OrcLib/XmlLiteExtension.h:55

↓ 2 callersMethodCreateXmlReaderInputWithEncodingName

src/OrcLib/XmlLiteExtension.h:61

↓ 2 callersMethodCryptCATAdminAcquireContext

src/OrcLib/WinTrustExtension.cpp:44

↓ 2 callersMethodCryptCATCatalogInfoFromContext

src/OrcLib/WinTrustExtension.h:113

↓ 2 callersMethodDebug

src/OrcLib/Log/Logger.h:177

↓ 2 callersFunctionDefaultSchema

src/OrcCommand/Command/DD/DD.h:73

↓ 2 callersMethodDeleteWhenDone

src/OrcLib/CommandExecute.h:113

↓ 2 callersMethodDependsOnAttribute

src/OrcLib/FileFind.h:317

↓ 2 callersMethodDependsOnDataNameOrSize

src/OrcLib/FileFind.h:310

↓ 2 callersMethodDependsOnKeyName

src/OrcLib/RegFind.h:147

↓ 2 callersMethodDependsOnKeyPath

src/OrcLib/RegFind.h:150

↓ 2 callersMethodDisable

src/OrcLib/Utils/StdStream/StandardOutputFileTee.cpp:33

↓ 2 callersMethodEnable

src/OrcLib/Utils/StdStream/StandardOutputFileTee.cpp:23

↓ 2 callersMethodEnableBacktrace

src/OrcLib/Log/SpdlogLogger.cpp:45

↓ 2 callersMethodEnumData

src/OrcLib/MFTRecord.cpp:792

↓ 2 callersMethodEnumResourceNamesW

src/OrcLib/Kernel32Extension.h:58

↓ 2 callersMethodEnumRunningCode

src/OrcLib/RunningCode.cpp:292

↓ 2 callersMethodEnumerateProcesses

src/OrcLib/RunningProcesses.cpp:18

↓ 2 callersMethodEnumerateShadowCopies

src/OrcLib/Location.cpp:363

↓ 2 callersMethodError

src/OrcLib/Log/Logger.h:303

↓ 2 callersMethodExecute

src/OrcLib/CommandExecute.cpp:282

↓ 2 callersFunctionExtractRunner

src/OrcCapsule/Cmd/CmdMain/Runner.cpp:96

↓ 2 callersFunctionFinal

src/OrcCapsule/Utilities/Crypto.cpp:104

↓ 2 callersFunctionFind

src/OrcLib/ZipLibrary.cpp:70

↓ 2 callersMethodFirstCatalogOffset

src/OrcLib/Filesystem/Ntfs/ShadowCopy/SnapshotsIndexHeader.h:49

↓ 2 callersMethodFlushQueue

src/OrcLib/ZipCreate.cpp:456

↓ 2 callersMethodForEachOutput

src/OrcCommand/UtilitiesMain.h:354

↓ 2 callersFunctionFormatHexDump

Format first N bytes as hex dump with ASCII representation

src/OrcCapsule/Cmd/CmdResource.cpp:502

↓ 2 callersFunctionFormatRawBytes

src/OrcCapsule/Utilities/Format.cpp:38

↓ 2 callersFunctionFormatSystemTimeA

src/OrcLib/Text/Fmt/SYSTEMTIME.h:16

↓ 2 callersFunctionFormatSystemTimeW

src/OrcLib/Text/Fmt/SYSTEMTIME.h:29

↓ 2 callersMethodForwardCursorBy

src/OrcLib/CircularStorage.h:201

↓ 2 callersMethodForwardEndOfCursorBy

src/OrcLib/CircularStorage.h:229

↓ 2 callersMethodFreeSecurityDescritor

src/OrcLib/SecurityDescriptor.h:26

↓ 2 callersMethodFrn

src/OrcLib/Filesystem/Ntfs/ShadowCopy/CatalogEntry.h:125

↓ 2 callersFunctionFromSystemTime

src/OrcLib/Utils/Time.cpp:17

↓ 2 callersMethodGetArchiveFormat

src/OrcLib/Archive.cpp:22

↓ 2 callersMethodGetBlockOffset

src/OrcLib/Filesystem/Ntfs/ShadowCopy/ShadowCopy.cpp:109

↓ 2 callersMethodGetComputeHash

src/OrcLib/ArchiveMessage.h:118

↓ 2 callersMethodGetConfiguration

src/OrcLib/RegFindConfig.cpp:16

← previous next →601–700 of 5,324, ranked by callers