Classes
struct	Item

Public Member Functions
	DelayedScanQueue (YaraEngine &y)
void	enqueue (const std::string &path, int delay_ms=30000)
void	run ()
void	stop ()

Private Attributes
YaraEngine &	yara
std::mutex	mtx
std::vector< Item >	queue
std::atomic< bool >	active {true}

Detailed Description

Definition at line 858 of file BastionGuard-ransomware-realtime.cpp.

Constructor & Destructor Documentation

◆ DelayedScanQueue()

DelayedScanQueue::DelayedScanQueue ( YaraEngine & y )

inline

Definition at line 872 of file BastionGuard-ransomware-realtime.cpp.

872: yara(y) {}

DelayedScanQueue::yara

YaraEngine & yara

Definition BastionGuard-ransomware-realtime.cpp:860

References yara.

Member Function Documentation

◆ enqueue()

void DelayedScanQueue::enqueue	(	const std::string &	path,
		int	delay_ms = 30000 )

inline

Definition at line 874 of file BastionGuard-ransomware-realtime.cpp.

    {
        std::lock_guard<std::mutex> lock(mtx);
        queue.push_back({
            path,
            std::chrono::steady_clock::now() + std::chrono::milliseconds(delay_ms)
        });
        log_msg(_("DelayedScanQueue: aggiunto ") + path);
    }

References _, log_msg(), mtx, and queue.

Referenced by InotifyEngine::run().

◆ run()

void DelayedScanQueue::run ( )

inline

Definition at line 884 of file BastionGuard-ransomware-realtime.cpp.

    {
        log_msg(_("DelayedScanQueue: thread avviato"));
 
        while (active) {
            auto now = std::chrono::steady_clock::now();
            std::vector<std::string> to_scan;
 
            {
                std::lock_guard<std::mutex> lock(mtx);
                auto it = queue.begin();
                while (it != queue.end()) {
                    if (it->when <= now) {
                        to_scan.push_back(it->path);
                        it = queue.erase(it);
                    } else {
                        ++it;
                    }
                }
            }
 
            for (const auto& p : to_scan) {
                log_msg(_("DelayedScanQueue: SCANSIONE RITARDATA → ") + p);
                yara.scan_file(p);
            }
 
            std::this_thread::sleep_for(std::chrono::milliseconds(500));
        }
 
        log_msg(_("DelayedScanQueue: thread terminato"));
    }