report

type File struct {
	FilePath  string `json:"path"`
	MD5Sum    string `json:"md5,omitempty"`
	SHA256Sum string `json:"sha256,omitempty"`
}

type FileReader struct {
	// contains filtered or unexported fields
}

type FileScan struct {
	File    *File       `json:"file"`
	Matches []*Match    `json:"match"`
	Error   interface{} `json:"error"`
}

type Match struct {
	Rule      string         `json:"rule"`
	Namespace string         `json:"namespace"`
	Strings   []*MatchString `json:"strings"`
}

type MatchString struct {
	Name   string `json:"name"`
	Base   uint64 `json:"base"`
	Offset uint64 `json:"offset"`
}

type MemoryScan struct {
	PID           int         `json:"pid"`
	MemorySegment uintptr     `json:"memorySegment"`
	Matches       []*Match    `json:"match"`
	Error         interface{} `json:"error"`
}

type MemorySegmentInfo struct {
	// ParentBaseAddress is the base address of the parent segment.
	// If no parent segment exists, this is equal to the BaseAddress.
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->AllocationBase
	ParentBaseAddress uintptr `json:"parentBaseAddress"`

	// BaseAddress is the base address of the current memory segment.
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->BaseAddress
	BaseAddress uintptr `json:"baseAddress"`

	// AllocatedPermissions is the Permissions that were used to initially
	// allocate this segment.
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->AllocationProtect
	AllocatedPermissions procio.Permissions `json:"allocatedPermissions"`

	// CurrentPermissions is the Permissions that the segment currently has.
	// This may differ from AllocatedPermissions if the permissions where changed
	// at some point (e.g. via VirtualProtect).
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->Protect
	CurrentPermissions procio.Permissions `json:"currentPermissions"`

	// Size contains the size of the segment in bytes.
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->RegionSize
	Size uintptr `json:"size"`

	// RSS contains the ResidentSetSize as reported on linux, i.e.
	// the amount of RAM this segment actually uses right now.
	// Equivalence on windows: No equivalence, this is currently always equal to Size.
	RSS uintptr `json:"rss"`

	// State contains the current State of the segment.
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->State
	State procio.State `json:"state"`

	// Type contains the Type of the segment.
	// Equivalence on windows: _MEMORY_BASIC_INFORMATION->SegmentType
	Type procio.SegmentType `json:"type"`

	// File contains the path to the mapped file, or empty string if
	// no file mapping is associated with this memory segment.
	MappedFile *File `json:"mappedFile"`
}

type MetaInformation struct {
	YapscanVersion version.Version   `json:"yapscanVersion"`
	FormatVersion  version.Version   `json:"formatVersion"`
	SchemaURLs     map[string]string `json:"schemaURLs"`
}

type Parser struct{}

type ProcessInfo struct {
	PID              int                  `json:"pid"`
	Bitness          arch.Bitness         `json:"bitness"`
	ExecutablePath   string               `json:"executablePath"`
	ExecutableMD5    string               `json:"executableMD5"`
	ExecutableSHA256 string               `json:"executableSHA256"`
	Username         string               `json:"username"`
	MemorySegments   []*MemorySegmentInfo `json:"memorySegments"`
}

type ProfilingInformation struct {
	Time                  Time    `json:"time"`
	FreeRAM               uintptr `json:"freeRAM"`
	FreeSwap              uintptr `json:"freeSwap"`
	LoadAvgOneMinute      float64 `json:"loadAvgOneMinute"`
	LoadAvgFiveMinutes    float64 `json:"loadAvgFiveMinutes"`
	LoadAvgFifteenMinutes float64 `json:"loadAvgFifteenMinutes"`
}

type ProfilingInformationV100 struct {
	Time                  TimeV100 `json:"time"`
	FreeRAM               uintptr  `json:"freeRAM"`
	FreeSwap              uintptr  `json:"freeSwap"`
	LoadAvgOneMinute      float64  `json:"loadAvgOneMinute"`
	LoadAvgFiveMinutes    float64  `json:"loadAvgFiveMinutes"`
	LoadAvgFifteenMinutes float64  `json:"loadAvgFifteenMinutes"`
}

type Reader interface {
	SetPassword(password string)
	SetKeyring(keyring openpgp.EntityList)
	OpenMeta() (io.ReadCloser, error)
	OpenSystemInformation() (io.ReadCloser, error)
	OpenStatistics() (io.ReadCloser, error)
	OpenProcesses() (io.ReadCloser, error)
	OpenMemoryScans() (io.ReadCloser, error)
	OpenFileScans() (io.ReadCloser, error)
	io.Closer
}

type ReaderFactory struct {
	// contains filtered or unexported fields
}

type Report struct {
	Meta        *MetaInformation
	Stats       *ScanningStatistics
	SystemInfo  *SystemInfo
	Processes   []*ProcessInfo
	MemoryScans []*MemoryScan
	FileScans   []*FileScan
}

type ReportWriter struct {
	// contains filtered or unexported fields
}

type ScanningStatistics struct {
	Start                      Time                    `json:"start"`
	End                        Time                    `json:"end"`
	NumberOfProcessesScanned   uint64                  `json:"numberOfProcessesScanned"`
	NumberOfSegmentsScanned    uint64                  `json:"numberOfSegmentsScanned"`
	NumberOfMemoryBytesScanned uint64                  `json:"numberOfMemoryBytesScanned"`
	NumberOfFileBytesScanned   uint64                  `json:"numberOfFileBytesScanned"`
	NumberOfFilesScanned       uint64                  `json:"numberOfFilesScanned"`
	ProfilingInformation       []*ProfilingInformation `json:"profilingInformation"`
}

type ScanningStatisticsV100 struct {
	Start                      TimeV100                    `json:"start"`
	End                        TimeV100                    `json:"end"`
	NumberOfProcessesScanned   uint64                      `json:"numberOfProcessesScanned"`
	NumberOfSegmentsScanned    uint64                      `json:"numberOfSegmentsScanned"`
	NumberOfMemoryBytesScanned uint64                      `json:"numberOfMemoryBytesScanned"`
	NumberOfFileBytesScanned   uint64                      `json:"numberOfFileBytesScanned"`
	NumberOfFilesScanned       uint64                      `json:"numberOfFilesScanned"`
	ProfilingInformation       []*ProfilingInformationV100 `json:"profilingInformation"`
}

type SystemInfo struct {
	OSName    string   `json:"osName"`
	OSVersion string   `json:"osVersion"`
	OSFlavour string   `json:"osFlavour"`
	OSArch    arch.T   `json:"osArch"`
	Hostname  string   `json:"hostname"`
	IPs       []string `json:"ips"`
	NumCPUs   int      `json:"numCPUs"`
	TotalRAM  uintptr  `json:"totalRAM"`
	TotalSwap uintptr  `json:"totalSwap"`
}

type Time struct {
	time.Time
}

type TimeV100 struct {
	time.Time
}

type Validator struct {
	// contains filtered or unexported fields
}