AntiRansomwarePage.hpp

Go to the documentation of this file.

/*
 * BastionGuard™
 * Copyright (C) 2025–2026 Calogero Scarnà
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 * BastionGuard™ is a trademark of Calogero Scarnà.
 * The BastionGuard™ name and branding are not licensed under the GPL.
 */
 
#pragma once
#include <gtkmm.h>
#include <giomm.h>
#include <filesystem>
#include <string>
#include <vector>
#include <yara.h>
#include <thread>
#include <atomic>
 
#include "LifetimeGuard.hpp"
 
class AntiRansomwarePage : public Gtk::Box {
public:
    AntiRansomwarePage(Gtk::Window& parent);
    virtual ~AntiRansomwarePage();
 
    std::string selectedPath;
 
    void sendAlert(const std::string& file, const std::string& ruleName);
    void appendLog(const Glib::ustring& text);
 
private:
 
    Gtk::Window& parentWindow;
 
    Gtk::Box buttonBox{Gtk::Orientation::HORIZONTAL, 8};
    Gtk::Button btnStart{"Avvia protezione"};
    Gtk::Button btnStop{"Ferma protezione"};
    Gtk::Button btnChooseFile{"Scegli file"};
    Gtk::Button btnChooseFolder{"Scegli cartella"};
    Gtk::Button btnScan{"Scansiona"};
    Gtk::Button btnTest{"Test alert"};
 
    Gtk::TextView textView;
    Glib::RefPtr<Gtk::TextBuffer> textBuffer;
 
    bool daemonRunning = false;
 
 
    YR_COMPILER* yaraCompiler = nullptr;
    YR_RULES* yaraRules = nullptr;
 
    void loadYaraRules();
    void runYaraOnPath(const std::string& path);
    void scanDirectoryRecursively(const std::string& path);
 
 
    void onStartDaemon();
    void onStopDaemon();
    void onChooseFile();
    void onChooseFolder();
    void onManualScan();
    void onTestAlert();
 
 
    std::thread logThread;
    std::atomic<bool> logThreadRunning{false};
 
    // Alive flag: proteggere signal_idle.connect_once che possono
    // eseguirsi dopo la distruzione della pagina.
    BastionGuard::AliveFlag alive_ = BastionGuard::make_alive_flag();
 
    void startRealtimeLogReader();
    void processLogLine(const std::string& line);
};