@iota-big3/sdk-security
Version:
Advanced security features including zero trust, quantum-safe crypto, and ML threat detection
61 lines • 1.9 kB
TypeScript
/**
* Memory Forensics Analyzer
* Analyzes memory dumps for malware, suspicious processes, and IOCs
*/
import { EventEmitter } from 'events';
import { AnalysisResult, Artifact, ForensicAnalysisType, ForensicAnalyzer, ForensicEvidence } from '../types';
export declare class MemoryAnalyzer extends EventEmitter implements ForensicAnalyzer {
readonly type = ForensicAnalysisType.MEMORY;
private knownGoodProcesses;
private suspiciousPatterns;
private malwareSignatures;
constructor();
/**
* Analyze memory dump
*/
analyze(evidence: ForensicEvidence): Promise<AnalysisResult>;
/**
* Validate memory dump
*/
validate(evidence: ForensicEvidence): Promise<boolean>;
/**
* Extract artifacts from memory
*/
extract(evidence: ForensicEvidence, options?: any): Promise<Artifact[]>;
/**
* Generate report
*/
generateReport(analysis: AnalysisResult): Promise<string>;
/**
* Export findings
*/
exportFindings(analysis: AnalysisResult, format: string): Promise<Buffer>;
/**
* Private helper methods
*/
private parseMemoryDump;
private analyzeProcesses;
private analyzeNetworkConnections;
private analyzeModules;
private analyzeInjections;
private analyzeHooks;
private extractStrings;
private buildTimeline;
private isProcessMasquerading;
private categorizeStrings;
private formatBytes;
private exportToCSV;
private exportToSTIX;
private iocToSTIXPattern;
private readHeader;
private extractExecutables;
private extractNetworkData;
private extractRegistryHives;
private generateConclusion;
private generateMockProcesses;
private generateMockConnections;
private generateMockModules;
private generateMockInjections;
private generateMockHooks;
}
//# sourceMappingURL=memory-analyzer.d.ts.map