registry

package

v0.0.0-...-5a3c2f8 Latest Latest Go to latest Published: Nov 20, 2025 License: BSD-3-Clause Imports: 19 Imported by: 0

Details

This section is empty.

View Source

var AnalysisPlugins []AnalysisPlugin

AnalysisPlugins is the iterable collection of all active plugins

func CalculateBasicHashes(rd io.Reader) (sampledb.HashInfo, error)

CalculateBasicHashes uses a multiWriter to efficiently calculate file hashes REF: http://marcio.io/2015/07/calculating-multiple-file-hashes-in-a-single-pass/

func MagicFromFile(path string) string

MagicFromFile returns a magic string for the file in the given path.

func PluginIterator(fiev sampledb.FileInfoEvent, s submitter.Submitter, uploader *uploader.Uploader) error

PluginIterator opens a given sample file and processes it with all registered plugins.

func RegisterAnalysisPlugin(p AnalysisPlugin)

RegisterAnalysisPlugin makes an enrichment plugin available for usage

type AnalysisPlugin interface {
	Name() string
	ReInitialize() error
	ProcessFile(FileSample) (string, bool, error)
}

AnalysisPlugin defines the high level functions every EnrichPlugin has to provide.

type FileSample struct {
	FD       uintptr
	Info     os.FileInfo
	OrigPath string
}

FileSample is the struct passed to every plugin to handle the sample