MCPcopy Create free account

hub / github.com/TakahiroHaruyama/openioc_scan / functions

Functions106 in github.com/TakahiroHaruyama/openioc_scan

⨍ Functions 106◇ Types & classes 12
↓ 26 callersMethodis_condition_string
(self, condition)
openioc_scan.py:115
↓ 22 callersMethodcheck_strings
(self, target_list, content, condition, preserve_case)
openioc_scan.py:171
↓ 17 callersMethodcheck_done
(self, item)
openioc_scan.py:257
↓ 14 callersMethodfetchall_from_db_by_pid
(self, table, column)
openioc_scan.py:270
↓ 13 callersMethodfetchone_from_db
(self, cur, table, column)
openioc_scan.py:212
↓ 10 callersMethodfetchall_from_db
(self, cur, table, column)
openioc_scan.py:206
↓ 10 callersMethodupdate_done
(self, item)
openioc_scan.py:262
↓ 8 callersMethodcalculate
(self)
openioc_scan.py:2096
↓ 7 callersMethodcheck_string
(self, target, content, condition, preserve_case)
openioc_scan.py:136
↓ 7 callersMethodwith_item
(self, iocid, name)
openioc_scan.py:1591
↓ 6 callersMethod_vicinity_scan
(self, addr_space, calls_imported, apis, base_address, data_len, forward, injected)
openioc_scan.py:414
↓ 5 callersMethodextract_MFT_entries
(self, is_inode=False, is_name=False, is_extension=False, is_path=False, is_size=False)
openioc_scan.py:1410
↓ 5 callersMethodfetchall_from_db_by_base
(self, table, column)
openioc_scan.py:1064
↓ 4 callersMethodcheck_integers
(self, target_list, content, condition, preserve_case)
openioc_scan.py:200
↓ 4 callersMethodextract_netinfo
(self, is_protocol=False, is_laddr=False, is_lport=False, is_raddr=False, is_rport=False, is_state=False)
openioc_scan.py:719
↓ 4 callersMethodis_condition_bool
(self, condition)
openioc_scan.py:108
↓ 4 callersMethodis_condition_integer
(self, condition)
openioc_scan.py:122
↓ 4 callersMethodmake_regex
(self, content, preserve_case)
openioc_scan.py:129
↓ 4 callersMethodscan
(self, iocid, process, kmod)
openioc_scan.py:1759
↓ 3 callersMethoddetect_code_injections
(self)
openioc_scan.py:288
↓ 3 callersMethodextract_services
(self, is_service_name=False, is_display_name=False, is_bin_path=False)
openioc_scan.py:980
↓ 3 callersMethodfetchone_from_db_by_pid
(self, table, column)
openioc_scan.py:279
↓ 3 callersMethodfilter_tasks
(self, tasks)
openioc_scan.py:1879
↓ 3 callersMethodget_data
(self)
openioc_scan.py:1088
↓ 2 callersMethodcheck_indicator_item
(self, node, params, is_last_item)
openioc_scan.py:1605
↓ 2 callersMethodextract_ascii
(self, data)
openioc_scan.py:184
↓ 2 callersMethodextract_dllpaths
(self, is_path=False, is_hidden=False)
openioc_scan.py:573
↓ 2 callersMethodextract_handles
(self, is_name=False, is_type=False)
openioc_scan.py:640
↓ 2 callersMethodextract_hooked_APIs
(self, is_API=False, is_hookingMod=False)
openioc_scan.py:826
↓ 2 callersMethodextract_unicode
(self, data)
openioc_scan.py:180
↓ 2 callersMethodfetchone_from_db_by_base
(self, table, column)
openioc_scan.py:1073
↓ 2 callersMethodfilter_mods
(self, mods)
openioc_scan.py:2083
↓ 2 callersMethodmake_tables
(self)
openioc_scan.py:1920
↓ 2 callersMethodparse
(self, ioc_obj)
openioc_scan.py:1565
↓ 2 callersMethodread_without_zero_page
(self, vad, address_space)
openioc_scan.py:242
↓ 2 callersMethodwalk_indicator
(self, node, params)
openioc_scan.py:1694
↓ 2 callersMethodwalk_parameter
(self, node)
openioc_scan.py:1742
↓ 2 callersMethodwith_item_all
(self, name)
openioc_scan.py:1599
↓ 1 callersMethod__init__
(self, verbose=False)
openioc_scan.py:93
↓ 1 callersMethodcheck_and_extract_strings
(self, content, condition, preserve_case)
openioc_scan.py:352
↓ 1 callersMethodcheck_integer
(self, target, content, condition, preserve_case)
openioc_scan.py:188
↓ 1 callersMethodclear_tables
(self)
openioc_scan.py:1890
↓ 1 callersMethoddisplay
(self)
openioc_scan.py:1807
↓ 1 callersMethodextract_IRP_info
(self)
openioc_scan.py:1199
↓ 1 callersMethodextract_SSDT_hooked_functions
(self)
openioc_scan.py:1331
↓ 1 callersMethodextract_all_active_procs
(self, not_carve)
openioc_scan.py:1996
↓ 1 callersMethodextract_all_loaded_kernel_mods
(self)
openioc_scan.py:2063
↓ 1 callersMethodextract_callbacks
(self)
openioc_scan.py:1243
↓ 1 callersMethodextract_privileges
(self)
openioc_scan.py:875
↓ 1 callersMethodextract_strings
(self)
openioc_scan.py:334
↓ 1 callersMethodextract_timers
(self)
openioc_scan.py:1278
↓ 1 callersMethodinit_db
(self, f_erase)
openioc_scan.py:1951
↓ 1 callersMethodinsert
(self, filename)
openioc_scan.py:1542
↓ 1 callersMethodprepare
(self, cur, _config)
openioc_scan.py:1587
↓ 1 callersMethodupdate_all_done
(self, item)
openioc_scan.py:266
MethodCallbackRoutine_Type
(self, content, condition, preserve_case)
openioc_scan.py:1264
MethodDllHidden
(self, content, condition, preserve_case)
openioc_scan.py:616
MethodDllPath
(self, content, condition, preserve_case)
openioc_scan.py:604
MethodDriverName
(self, content, condition, preserve_case)
openioc_scan.py:1082
MethodEnabledPrivilege_Name
(self, content, condition, preserve_case)
openioc_scan.py:892
MethodFileExtension
(self, content, condition, preserve_case)
openioc_scan.py:1482
MethodFileName
(self, content, condition, preserve_case)
openioc_scan.py:1469
MethodFullPath
(self, content, condition, preserve_case)
openioc_scan.py:1495
MethodHandleList_Handle_Name
(self, content, condition, preserve_case)
openioc_scan.py:689
MethodHandleList_Handle_Type
(self, content, condition, preserve_case)
openioc_scan.py:704
MethodHooked_API_FunctionName
(self, content, condition, preserve_case)
openioc_scan.py:850
MethodHooked_API_HookingModuleName
(self, content, condition, preserve_case)
openioc_scan.py:862
MethodINode
(self, content, condition, preserve_case)
openioc_scan.py:1456
MethodIRP_HookingModuleName
(self, content, condition, preserve_case)
openioc_scan.py:1229
MethodPEInfo_ImportedModules_Module_ImportedFunctions_string
(self, content, condition, preserve_case)
openioc_scan.py:1122
MethodParentProcessName
(self, content, condition, preserve_case)
openioc_scan.py:552
MethodPath
(self, content, condition, preserve_case)
openioc_scan.py:922
MethodPortList_PortItem_localIP
(self, content, condition, preserve_case)
openioc_scan.py:784
MethodPortList_PortItem_localPort
(self, content, condition, preserve_case)
openioc_scan.py:754
MethodPortList_PortItem_remoteIP
(self, content, condition, preserve_case)
openioc_scan.py:799
MethodPortList_PortItem_remotePort
(self, content, condition, preserve_case)
openioc_scan.py:769
MethodSSDT_HookedFunctionName
(self, content, condition, preserve_case)
openioc_scan.py:1388
MethodSectionList_MemorySection_Injected
(self, content, condition, preserve_case)
openioc_scan.py:299
MethodSectionList_MemorySection_InjectedHexPattern
(self, content, condition, preserve_case)
openioc_scan.py:315
MethodSectionList_MemorySection_PEInfo_ImportedModules_Module_ImportedFunctions_string
(self, content, condition, preserve_case)
openioc_scan.py:470
MethodShimCache_ExecutablePath
(self, content, condition, preserve_case)
openioc_scan.py:951
MethodSizeInBytes
(self, content, condition, preserve_case)
openioc_scan.py:1508
MethodStringList_string
condition: is/contains/matches(regex)/starts-with/ends-with preserve_case: true/false
openioc_scan.py:360
MethodStringList_string
(self, content, condition, preserve_case)
openioc_scan.py:1168
MethodTimerRoutineIncluded
(self, content, condition, preserve_case)
openioc_scan.py:1304
Method__enter__
(self)
openioc_scan.py:96
Method__exit__
(self, *args)
openioc_scan.py:100
Method__init__
(self, process, cur, _config)
openioc_scan.py:219
Method__init__
(self, cur, _config)
openioc_scan.py:905
Method__init__
(self, cur, _config)
openioc_scan.py:973
Method__init__
(self, kmod, cur, _config)
openioc_scan.py:1042
Method__init__
(self, cur, _config)
openioc_scan.py:1323
Method__init__
(self, cur, _config)
openioc_scan.py:1402
Method__init__
(self)
openioc_scan.py:1525
Method__init__
(self, config, *args, **kwargs)
openioc_scan.py:1849
Method__len__
(self)
openioc_scan.py:1539
MethodcmdLine
(self, content, condition, preserve_case)
openioc_scan.py:565
MethodcmdLine
(self, content, condition, preserve_case)
openioc_scan.py:1026
MethoddescriptiveName
(self, content, condition, preserve_case)
openioc_scan.py:1012
Methodget_path
(self, keypath, key)
openioc_scan.py:913
next →1–100 of 106, ranked by callers