| 211 | |
| 212 | |
| 213 | void EventProcessor::EventStats(nlohmann::json& j) { |
| 214 | if (j["type"] == "kernel") { |
| 215 | num_kernel += 1; |
| 216 | } |
| 217 | else if (j["type"] == "dll") { |
| 218 | num_dll += 1; |
| 219 | } |
| 220 | else if (j["type"] == "etw") { |
| 221 | if (j["etw_provider_name"] == "Microsoft-Windows-Threat-Intelligence") { |
| 222 | num_etwti += 1; |
| 223 | } |
| 224 | else { |
| 225 | num_etw += 1; |
| 226 | } |
| 227 | } |
| 228 | } |
| 229 | |
| 230 | |
| 231 | void EventProcessor::ResetData() { |
nothing calls this directly
no outgoing calls
no test coverage detected