Package lib :: Package maec :: Module maec40
[hide private]
[frames] | no frames]

Module maec40

source code

Functions [hide private]
 
hiveHexToString(hive_hex_value)
Maps a Registry Hive hex input to its String (name) equivalent
source code
 
regDatatypeToString(datatype_int_value)
Maps a Registry Datatype integer input to its String (name) equivalent
source code
 
socketProtoToString(proto_int_value)
Maps a Socket Protocol integer input to its String (name) equivalent
source code
 
socketAFToString(af_int_value)
Maps a Socket Address Family integer input to its String (name) equivalent
source code
 
socketTypeToString(type_int_value)
Maps a Socket Type integer input to its String (name) equivalent
source code
 
intToHex(value)
Convert an integer to a hex string
source code
 
regStringToHive(reg_string)
Maps a string representing a Registry Key from a NT* API call input to its normalized hive
source code
 
regStringToKey(reg_string)
Maps a string representing a Registry Key from a NT* API call input to its normalized key portion
source code
Variables [hide private]
  api_call_mappings = {'ConnectEx': {'action_name': 'connect to ...
  __package__ = 'lib.maec'
Variables Details [hide private]

api_call_mappings

Value:
{'ConnectEx': {'action_name': 'connect to socket',
               'action_vocab': 'maecVocabs:SocketActionNameVocab-1.0',
               'parameter_associated_arguments': {'socket': {'associat\
ed_argument_name': 'Socket Descriptor'}}},
 'ControlService': {'action_name': 'send control code to service',
                    'action_vocab': 'maecVocabs:ServiceActionNameVocab\
-1.0',
                    'parameter_associated_arguments': {'ControlCode': \
...