Package modules :: Package signatures :: Module generic_metrics :: Class SystemMetrics
[hide private]
[frames] | no frames]

Class SystemMetrics

source code

                           object --+    
                                    |    
lib.cuckoo.common.abstracts.Signature --+
                                        |
                                       SystemMetrics

Instance Methods [hide private]
 
stop(self) source code
 
on_call(self, call, process)
Notify signature about API call.
source code

Inherited from lib.cuckoo.common.abstracts.Signature: __init__, as_result, check_api, check_argument, check_argument_call, check_domain, check_file, check_ip, check_key, check_mutex, check_url, get_argument, on_complete, run

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  name = 'generic_metrics'
  description = 'Uses GetSystemMetrics'
  severity = 2
  categories = ['generic']
  authors = ['Cuckoo Developers']
  minimum = '1.0'
hash(x)
  evented = True
  filter_processnames = set()
  filter_apinames = set(['GetSystemMetrics'])
  filter_categories = set()
  enabled = False

Inherited from lib.cuckoo.common.abstracts.Signature: alert, families, maximum, order, references

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

on_call(self, call, process)

source code 

Notify signature about API call. Return value determines if this signature is done or could still match.

Parameters:
  • call - logged API call.
  • process - process doing API call.
Raises:
  • NotImplementedError - this method is abstract.
Overrides: lib.cuckoo.common.abstracts.Signature.on_call
(inherited documentation)