Struct scanner

pkg/yara/scanner.go:68–77

)

type scanner struct {
	c      *yara.Compiler
	rules  *yara.Rules
	config config.Config

	psnap ps.Snapshotter

	rwxs  map[uint32]va.Address // contains scanned and matched RWX process allocations
	mmaps map[uint32]va.Address // contains scanned and matched suspicious memory mappings
}

// NewScanner creates a new YARA scanner.
func NewScanner(psnap ps.Snapshotter, config config.Config) (Scanner, error) {