Skip to main content

parse

Function parse 

Source
pub fn parse(hive: &Hive<Cursor<Vec<u8>>>) -> Vec<ServiceEntry>
Expand description

Extract all service entries from a SYSTEM hive.

Walks SYSTEM\CurrentControlSet\Services, enumerates every direct subkey, extracts relevant values (with safe defaults for missing values), classifies each entry, and returns the full list (both suspicious and benign).