AntiRansomEngine.cpp File Reference

Go to the source code of this file.

Functions
static int	yara_callback (YR_SCAN_CONTEXT *context, int message, void *message_data, void *user_data)

Function Documentation

yara_callback()

int yara_callback ( YR_SCAN_CONTEXT * context, int message, void * message_data, void * user_data )

static

Definition at line 106 of file AntiRansomEngine.cpp.

                                                                                                     {
    if (message == CALLBACK_MSG_RULE_MATCHING) {
        auto* sig = reinterpret_cast<sigc::signal<void(const std::string&)>*>(user_data);
        YR_RULE* rule = (YR_RULE*) message_data;
        sig->emit(std::string(_("⚠ Ransomware rilevato: ")) + rule->identifier);
    }
    return CALLBACK_CONTINUE;
}

References _, and yara_callback().

Referenced by main(), run_single_directory_scan(), run_single_file_scan(), AntiRansomEngine::scan_file(), yara_callback(), and yara_callback().