MCPcopy Create free account
hub / github.com/DFIR-ORC/dfir-orc / EnumRunningCode

Method EnumRunningCode

src/OrcLib/RunningCode.cpp:292–309  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

290}
291
292HRESULT RunningCode::EnumRunningCode()
293{
294 HRESULT hr = E_FAIL;
295
296 if (FAILED(hr = EnumerateProcessesModules()))
297 {
298 Log::Error("Failed to enumerate process's modules [{}]", SystemError(hr));
299 }
300 if (FAILED(hr = EnumerateDeviceDrivers()))
301 {
302 Log::Error("Failed to enumerate device drivers [{}]", SystemError(hr));
303 }
304 if (FAILED(hr = SnapEnumProcessesModules()))
305 {
306 Log::Error("Failed to enumerate SNAPSHOT modules [{}]", SystemError(hr));
307 }
308 return S_OK;
309}
310
311HRESULT RunningCode::GetUniqueModules(Modules& modules, ModuleType type)
312{

Callers 2

TEST_METHODFunction · 0.80

Calls 2

SystemErrorFunction · 0.85
ErrorFunction · 0.50

Tested by 1

TEST_METHODFunction · 0.64