Functions — github.com/DFIR-ORC/dfir-orc

CodeHub MCPcopy Create free account

hub / github.com/DFIR-ORC/dfir-orc / functions

Functions5,324 in github.com/DFIR-ORC/dfir-orc

⨍ Functions 5,324◇ Types & classes 1,348

↓ 2 callersMethodReOpenFile

src/OrcLib/Kernel32Extension.h:89

↓ 2 callersFunctionReadAt

src/OrcLib/ByteStreamHelpers.h:112

↓ 2 callersFunctionReadChunk

src/OrcLib/ByteStreamHelpers.h:46

↓ 2 callersMethodReadData

src/OrcLib/MFTRecord.cpp:933

↓ 2 callersFunctionReadFileContents

src/OrcCapsule/Utilities/File.cpp:45

↓ 2 callersMethodReadJournal

src/OrcLib/USNJournalWalker.cpp:294

↓ 2 callersFunctionRegisterResourceLinksFromFile

src/OrcLib/EmbeddedResource_Embed.cpp:583

↓ 2 callersFunctionRemoveFile

src/OrcCapsule/Utilities/File.h:19

↓ 2 callersMethodRequest

src/OrcLib/CommandMessage.h:213

↓ 2 callersFunctionResolveDataDirectory

src/OrcLib/FileFormat/PeParser.cpp:506

↓ 2 callersFunctionResolveRunnerArchitectureFromHost

src/OrcCapsule/Cmd/CmdMain/Runner.cpp:188

↓ 2 callersMethodRtlInitUnicodeString

src/OrcLib/NtDllExtension.h:122

↓ 2 callersFunctionSanitizeResourceName

src/OrcLib/EmbeddedResource_Extract.cpp:46

↓ 2 callersMethodScanMethod

src/OrcLib/YaraScanner.h:81

↓ 2 callersMethodSecurityDirectoryAvailable

src/OrcLib/DataDetails.h:236

↓ 2 callersMethodSelection

src/OrcLib/ProcessRedirect.h:58

↓ 2 callersMethodSetAuthenticodeData

src/OrcLib/DataDetails.h:200

↓ 2 callersFunctionSetCompressionLevel

tools/rcedit/src/cmd/set/7z/compress_7z.cpp:56

↓ 2 callersFunctionSetCompressionLevel

src/OrcLib/Archive/7z/Archive7z.cpp:162

↓ 2 callersFunctionSetDefaultLogger

src/OrcLib/Log/Log.cpp:22

↓ 2 callersMethodSetExecutableSha1

src/OrcLib/CommandExecute.h:210

↓ 2 callersMethodSetFilePointer

src/OrcLib/TemporaryStream.cpp:206

↓ 2 callersMethodSetFilePointer

src/OrcLib/SubStream.cpp:98

↓ 2 callersMethodSetFilePointer

MemoryStream::SetFilePointer Sets the stream's current pointer. If the resultant pointer is greater than the number of valid bytes in the buffer, the

src/OrcLib/MemoryStream.cpp:366

↓ 2 callersMethodSetFirstBytes

src/OrcLib/DataDetails.h:118

↓ 2 callersMethodSetHasBeenEmbedded

src/OrcLib/EmbeddedResource_Embed.cpp:171

↓ 2 callersMethodSetHasNonResidentSubkeys

src/OrcLib/RegistryWalker.cpp:199

↓ 2 callersMethodSetIOCounters

src/OrcCommand/Command/WolfLauncher/Outcome.h:169

↓ 2 callersMethodSetIsSelfOrcExecutable

src/OrcCommand/Command/WolfLauncher/Outcome.h:135

↓ 2 callersMethodSetIsSelfOrcExecutable

src/OrcLib/CommandMessage.h:196

↓ 2 callersFunctionSetLogLevel

src/OrcCapsule/Utilities/Log.cpp:100

↓ 2 callersMethodSetOrcTool

src/OrcCommand/Command/WolfLauncher/Outcome.h:123

↓ 2 callersMethodSetOrcTool

src/OrcLib/CommandMessage.h:200

↓ 2 callersMethodSetOriginResourceName

src/OrcLib/CommandExecute.h:204

↓ 2 callersMethodSetPopulatePhysicalDrives

src/OrcLib/LocationSet.h:159

↓ 2 callersMethodSetQueueBehavior

src/OrcLib/CommandMessage.h:184

↓ 2 callersMethodSetSignerInfo

src/OrcLib/Authenticode.h:153

↓ 2 callersMethodSetTemporaryDirectory

src/OrcLib/DriverMgmt.cpp:150

↓ 2 callersMethodSetWERDontShowUI

src/OrcCommand/Command/WolfLauncher/WolfLauncher_Run.cpp:598

↓ 2 callersFunctionSetupDllLookupDirectories

src/OrcLib/Robustness.cpp:79

↓ 2 callersMethodSnapshotContext

src/OrcLib/Filesystem/Ntfs/ShadowCopy/SnapshotInformation.h:48

↓ 2 callersMethodStatistics

src/OrcLib/MFTWalker.cpp:1903

↓ 2 callersFunctionStringFromResourceId

tools/rcedit/src/cmd/list/resources.cpp:27

↓ 2 callersFunctionToCompressionType

tools/rcedit/src/cmd/set/compression_type.cpp:31

↓ 2 callersFunctionToGuid

src/OrcLib/Text/Guid.h:108

↓ 2 callersFunctionToIdentifiers

src/OrcLib/Filesystem/FileAttribute.cpp:168

↓ 2 callersFunctionToStringView

src/OrcLib/Text/ComparisonOperator.cpp:176

↓ 2 callersFunctionToSystemTime

src/OrcLib/Utils/Time.cpp:66

↓ 2 callersFunctionToWStringView

src/OrcLib/Text/ComparisonOperator.cpp:195

↓ 2 callersFunctionToWofAlgorithmXpress

src/OrcLib/Filesystem/Ntfs/Compression/WofAlgorithm.cpp:33

↓ 2 callersFunctionToWofBitOrder

src/OrcLib/Filesystem/Ntfs/Compression/WofChunks.cpp:126

↓ 2 callersFunctionToWolfPriority

src/OrcCommand/Command/WolfLauncher/WolfLauncher_Config.cpp:46

↓ 2 callersFunctionTo_PE_Hashs

src/OrcLib/Authenticode.cpp:227

↓ 2 callersMethodTotalRead

src/OrcLib/ByteStream.h:79

↓ 2 callersMethodTrace

src/OrcLib/Log/Logger.h:128

↓ 2 callersFunctionTryBeginUpdateResource

src/OrcLib/EmbeddedResource_Embed.cpp:1051

↓ 2 callersFunctionTryEndUpdateResource

There is sometimes a race condition with Windows after modifying the module. I guess it is only EndUpdateResource which has some issue but I wrapped o

src/OrcLib/EmbeddedResource_Embed.cpp:1098

↓ 2 callersFunctionUpdate

src/OrcCapsule/Utilities/Crypto.cpp:90

↓ 2 callersFunctionUtilFileExists

UtilFileExists Checks whether a file exists or not Parameters: pwszFilePath - The file path Return: TRUE -

src/OrcLib/Temporary.cpp:300

↓ 2 callersFunctionWaitChildProcess

src/OrcCapsule/Utilities/Process.cpp:198

↓ 2 callersMethodWaitCompletion

src/OrcLib/CommandExecute.cpp:478

↓ 2 callersMethodWarn

src/OrcLib/Log/Logger.h:261

↓ 2 callersMethodWinVerifyTrust

src/OrcLib/WinTrustExtension.cpp:84

↓ 2 callersFunctionWrite

src/OrcCommand/Command/WolfLauncher/Outcome.cpp:45

↓ 2 callersMethodWriteComment

src/OrcLib/XmlOutputWriter.cpp:733

↓ 2 callersFunctionWriteFileContents

src/OrcCapsule/Utilities/File.cpp:94

↓ 2 callersFunctionWriteSimpleData

tests/OrcApacheOrcTest/orc_output.cpp:128

↓ 2 callersFunctionWriteStatistics

src/OrcCommand/Command/GetThis/GetThis_Run.cpp:160

↓ 2 callersFunctionZstdCompressData

src/OrcCapsule/Utilities/Compression.cpp:104

↓ 2 callersFunctionZstdDecompressData

src/OrcCapsule/Utilities/Compression.cpp:164

↓ 2 callersMethodcompiler_message

src/OrcLib/YaraScanner.cpp:875

↓ 2 callersMethodcriticalCount

src/OrcLib/Log/Logger.cpp:65

↓ 2 callersMethodelt_size

src/OrcLib/Buffer.h:767

↓ 2 callersMethodenqueue

<summary> Add an item to the queue, comparisons using the 'payload' field will determine the location in the queue. </summary> <param name="_Msg"> Mes

src/OrcLib/PriorityBuffer.h:59

↓ 2 callersMethodformat

src/OrcLib/Text/Fmt/Result.h:20

↓ 2 callersFunctionget_level_style

src/OrcCapsule/Utilities/Log.cpp:44

↓ 2 callersMethodisGPT

src/OrcLib/PartitionTable.h:40

↓ 2 callersMethodis_view

src/OrcLib/Buffer.h:504

↓ 2 callersFunctionlessCaseInsensitive

src/OrcLib/CaseInsensitive.h:21

↓ 2 callersMethodoperator->

src/OrcLib/Utils/Result.h:299

↓ 2 callersMethodparse

src/OrcLib/Buffer.h:1152

↓ 2 callersFunctionsafe_localtime

Portable thread-safe localtime conversion. Problem: fmt::localtime was introduced in a newer fmt release and is absent here. On MSVC with the v141_xp

src/OrcCapsule/Utilities/Log.cpp:68

↓ 2 callersMethodscan_message

src/OrcLib/YaraScanner.cpp:893

↓ 2 callersMethodtimeOut

src/OrcLib/YaraScanner.h:74

↓ 2 callersMethodyr_rules_scan_mem

src/OrcLib/YaraStaticExtension.cpp:67

↓ 1 callersMethodAcquire

src/OrcLib/Semaphore.h:53

↓ 1 callersMethodAddData

src/OrcLib/CsvCruncher.h:105

↓ 1 callersMethodAddDumpFileDirectory

src/OrcLib/CommandExecute.cpp:276

↓ 1 callersMethodAddEndpoint

src/OrcCommand/Log/UtilitiesLogger.h:100

↓ 1 callersMethodAddExcludeTerm

src/OrcLib/FileFind.cpp:1885

↓ 1 callersMethodAddExcludeTermsFromConfig

src/OrcLib/FileFind.cpp:1009

↓ 1 callersMethodAddOutput

src/OrcCommand/Log/UtilitiesLogger.h:46

↓ 1 callersMethodAddRecipient

src/OrcLib/EncodeMessageStream.cpp:38

↓ 1 callersMethodAddRegFindFromConfig

src/OrcLib/RegFind.cpp:590

↓ 1 callersMethodAddRegFindFromTemplate

src/OrcLib/RegFind.cpp:608

↓ 1 callersMethodAddSampleName

src/OrcLib/Configuration/ConfigFile.cpp:684

↓ 1 callersMethodAddSamplePath

src/OrcLib/Configuration/ConfigFile.cpp:657

↓ 1 callersMethodAddStream

src/OrcLib/ArchiveCreate.cpp:142

↓ 1 callersMethodAddTermsFromConfig

src/OrcLib/FileFind.cpp:991

↓ 1 callersMethodAddTo

src/OrcLib/Log/SpdlogSink.h:35

← previous next →801–900 of 5,324, ranked by callers