dca_malware::MalwareDbClassifier Class Reference

#include <malwaredb_classifier.h>

Detailed Description

Malware database classifier class.

The classify function takes a given Malware object and returns the database classification result.

This can be either

• unknown (the malware is not in the database)
• known but not categorised (result is empty)
• known and has associated categories

See also

MalwareClassification::createDbClassifier, MalwareClassification, MalwareClassificationResults,

Definition at line 39 of file malwaredb_classifier.h.

Public Member Functions
dca::FunctionResult	classify (const Hash &aHash, MalwareClassificationResults &malwareResults) const
	Performs the Malware classification and returns the results. More...
dca::LogLevel	setLogLevel (dca::LogLevel newLevel)
	Sets the logging level for the given class instance. The old value will be returned. More...

Member Function Documentation

classify()

dca::FunctionResult dca_malware::MalwareDbClassifier::classify	(	const Hash &	aHash,
		MalwareClassificationResults &	malwareResults
	)		const

Performs the Malware classification and returns the results.

Parameters

[in]	aHash	A Hash object created by using Malware::create()
[out]	malwareResults	The classification results, containing all matched categories (if any)

Returns

DCA_SUCCESS or one of the following error codes

• ERR_MALWARE_INVALID
• DCA Generic Error Codes

setLogLevel()

dca::LogLevel dca_malware::MalwareDbClassifier::setLogLevel

(

dca::LogLevel

newLevel

)

Sets the logging level for the given class instance. The old value will be returned.

Usually the logging level is set to LOG_Notice.

Parameters

[in]

newLevel

The new LogLevel the class instance should use for logging

Returns

The old used logging level.

---

The documentation for this class was generated from the following file:

• malwaredb_classifier.h