search

OVALProject / Sandbox

The OVAL Language Sandbox
http://oval.mitre.org/language/sandbox.html
44 stars 36 forks source link

add support for the collection of PE header imports and exports #11

Open djhaynes opened 12 years ago

djhaynes commented 12 years ago

We should consider the collection of PE header imports and exports.

Imports: RVA (hexadecimal. example: 0040252C) Filename (string. example: MSVCR80.dll)

Exports: Name (string. the name of the exported function. Example: RegCreateKeyEx()) Entrypoint (hexadecimal. example: 0051454F) *Ordinal (integer. may not be completely necessary. Example: 8)

djhaynes commented 12 years ago

We should also collect sections.