modules.processing.platform.windows

Package modules :: Package processing :: Package platform :: Module windows |
[hide private]
[frames] | no frames]

# Module windows

source code

Classes | [hide private]
| MonitorProcessLog Yields each API call event to the parent handler.
| WindowsMonitor Parses monitor generated logs.
| BehaviorReconstructor Reconstructs the behavior of behavioral API logs.
| RebootReconstructor Reconstructs the behavior as would be seen after a reboot.

Functions | [hide private]
NT_SUCCESS(value) | source code
single(key, value) | source code
multiple(*l) | source code

Variables | [hide private]
| log = `logging.getLogger(__name__)`