admin/ghost
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

integrate thread enumeration into CLI scanning

Browse Source
This commit is contained in:
Adir Shitrit
2025-11-08 11:09:18 +02:00
parent 6ff3fedc10
commit ca0e679e2d
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ghost-cli/src/main.rs
View File

@@ -1,5 +1,5 @@
use anyhow::Result; use anyhow::Result;
use ghost_core::{memory, process, DetectionEngine, ThreatLevel}; use ghost_core::{memory, process, thread, DetectionEngine, ThreatLevel};
fn main() -> Result<()> { fn main() -> Result<()> {
env_logger::init(); env_logger::init();
@@ -15,7 +15,9 @@ fn main() -> Result<()> {
for proc in &processes { for proc in &processes {
if let Ok(regions) = memory::enumerate_memory_regions(proc.pid) { if let Ok(regions) = memory::enumerate_memory_regions(proc.pid) {
let result = engine.analyze_process(proc, &regions); // Get thread information if available
let threads = thread::enumerate_threads(proc.pid).ok();
let result = engine.analyze_process(proc, &regions, threads.as_deref());
if result.threat_level != ThreatLevel::Clean { if result.threat_level != ThreatLevel::Clean {
detections.push(result); detections.push(result);