A B C D E G H I K L M N P R S T W 
All Classes All Packages

A

addLogger(SpecLogger) - Method in class crystalpalace.spec.LinkSpec
register a logger to receive output (e.g., echo command) from Crystal Palace.
arch - Variable in class crystalpalace.spec.Capability
the architecture of the capability (e.g., x86, x64)
author - Variable in class crystalpalace.spec.LinkSpec
the author of this .spec file (if specified)

B

buildPic(String, Map) - Method in class crystalpalace.spec.LinkSpec
Deprecated.
as of release 12.01.25. Use Capability.None(java.lang.String) and LinkSpec.run(Capability, Map)

C

Capability - Class in crystalpalace.spec
A class to parse a DLL or COFF Object and extract API/link arguments from it.
Capability(String, byte[], String, String) - Constructor for class crystalpalace.spec.Capability
Internal constructor to create a Capability.
contents - Variable in class crystalpalace.spec.Capability
The contents of the capability
crystalpalace.spec - package crystalpalace.spec
 

D

description - Variable in class crystalpalace.spec.LinkSpec
a description of the tradecraft/technique in this .spec file

E

Echo(SpecProgram, String) - Static method in class crystalpalace.spec.SpecMessage
Log a message for the echo command
errors - Variable in exception crystalpalace.spec.SpecParseException
A collection of errors we found

G

getArch() - Method in class crystalpalace.spec.Capability
Get the CPU arch (e.g., x86, x64) of our capability
getArgument() - Method in exception crystalpalace.spec.SpecProgramException
Returns the argument to the was-executing command.
getAuthor() - Method in class crystalpalace.spec.LinkSpec
Return the author of this tradecraft.
getCommand() - Method in exception crystalpalace.spec.SpecProgramException
Returns the last command that was run or running when this error occured.
getContents() - Method in class crystalpalace.spec.Capability
Get the contents of this capability
getDescription() - Method in class crystalpalace.spec.LinkSpec
Return a description of the technique/tradecraft.
getErrors() - Method in exception crystalpalace.spec.SpecParseException
Get the parsing errors that were discovered while parsing this file.
getFile() - Method in class crystalpalace.spec.LinkSpec
Get the name of the file associated with this .spec.
getFile() - Method in exception crystalpalace.spec.SpecParseException
Get the file associated with this exception
getFile() - Method in exception crystalpalace.spec.SpecProgramException
Get the file associated with this program.
getFileName() - Method in class crystalpalace.spec.SpecMessage
Get the shortname of the file where this message occured.
getFileName() - Method in exception crystalpalace.spec.SpecProgramException
Get the shortname of the file where this error occured.
getKey() - Method in class crystalpalace.spec.Capability
Get the $KEY used for this specific capability.
getLabel() - Method in class crystalpalace.spec.Capability
Get the preferred Crystal Palace target label for this capability (e.g., x64.dll)
getLicense() - Method in class crystalpalace.spec.LinkSpec
Return the software license associated with the technique/tradecraft.
getMessage() - Method in class crystalpalace.spec.SpecMessage
Get the contents of this log message
getMessage() - Method in exception crystalpalace.spec.SpecParseException
Returns a generic error message string, something like Error(s) parsing [file here].
getMessage() - Method in exception crystalpalace.spec.SpecProgramException
Get the description of the error that generated this exception.
getName() - Method in class crystalpalace.spec.LinkSpec
Return the name of the technique/tradecraft.
getName(String) - Method in class crystalpalace.spec.LinkSpec
Return the name of the technique/tradecraft.
getProgram() - Method in class crystalpalace.spec.LinkResult
Get the linker output
getReference() - Method in class crystalpalace.spec.LinkSpec
Return URL or other reference associated with the technique/tradecraft.
getRules() - Method in class crystalpalace.spec.LinkResult
Get the Yara rules generated by our linker.
getStack() - Method in exception crystalpalace.spec.SpecProgramException
Get the stack from the .spec file's execution environment.
getTarget() - Method in class crystalpalace.spec.SpecMessage
Get the label context from our current Spec program (e.g., x86, x64)
getTarget() - Method in exception crystalpalace.spec.SpecProgramException
Get the target that was executing within the .specification file (e.g., x86, x64).
getType() - Method in class crystalpalace.spec.SpecMessage
Get the type of this log message
getVariables() - Method in exception crystalpalace.spec.SpecProgramException
Returns the variables set in the last command that was or running when this error occured.

H

hasCapability() - Method in class crystalpalace.spec.Capability
Check if this Capability is associated with a DLL or COFF.

I

isDll() - Method in class crystalpalace.spec.Capability
Is the capability a DLL?
isObject() - Method in class crystalpalace.spec.Capability
Is the capability a COFF?

K

key - Variable in class crystalpalace.spec.Capability
The name of the $KEY for this capability in our environment

L

label - Variable in class crystalpalace.spec.Capability
the capability-specific program label (e.g., x64.o)
license - Variable in class crystalpalace.spec.LinkSpec
License for the code and rules in this .spec file.
LinkResult - Class in crystalpalace.spec
Output from the Crystal Palace linker
LinkResult() - Constructor for class crystalpalace.spec.LinkResult
 
LinkSpec - Class in crystalpalace.spec
An object that parses and interprets a Crystal Palace specification file.
LinkSpec(SpecParser, String) - Constructor for class crystalpalace.spec.LinkSpec
The constructor for our LinkSpec.
logSpecMessage(SpecMessage) - Method in interface crystalpalace.spec.SpecLogger
Act on output from Crystal Palace

M

message - Variable in class crystalpalace.spec.SpecMessage
string contents of the output
message - Variable in exception crystalpalace.spec.SpecProgramException
The message associated with the error.
MESSAGE_ECHO - Static variable in class crystalpalace.spec.SpecMessage
echo message
MESSAGE_WARN - Static variable in class crystalpalace.spec.SpecMessage
warning message (not an error)
meta(String, String) - Method in class crystalpalace.spec.LinkSpec
set a meta-value for this specification file (e.g., name, reference, describe, etc.)

N

name - Variable in class crystalpalace.spec.LinkSpec
the short name of the technique/tradecraft in this .spec file
None(String) - Static method in class crystalpalace.spec.Capability
Create a Capability object, usable with the LinkSpec API, but not associated with a DLL or Object.

P

parent - Variable in class crystalpalace.spec.LinkSpec
the file associated with this spec.
parent - Variable in exception crystalpalace.spec.SpecParseException
The .spec file where these errors came from
Parse(byte[]) - Static method in class crystalpalace.spec.Capability
Create a new Capability by guessing if the capability content is a DLL or Object.
Parse(String) - Static method in class crystalpalace.spec.LinkSpec
Parse a .spec file and return a ready-to-run LinkSpec object.
Parse(String, String) - Static method in class crystalpalace.spec.LinkSpec
Parse a .spec file and return a ready-to-run LinkSpec object.
ParseDll(byte[]) - Static method in class crystalpalace.spec.Capability
Create a new Capability from a DLL
ParseObject(byte[]) - Static method in class crystalpalace.spec.Capability
Create a new Capability from a COFF Object
program - Variable in class crystalpalace.spec.LinkResult
Linker output (e.g., PIC, COFF, PICO)
program - Variable in class crystalpalace.spec.LinkSpec
the execution environment for applying this specification to passed in variables
program - Variable in exception crystalpalace.spec.SpecProgramException
The program where the error occurred.

R

reference - Variable in class crystalpalace.spec.LinkSpec
URL for the tradecraft/technique in this .spec file
removeLogger(SpecLogger) - Method in class crystalpalace.spec.LinkSpec
remove a registered logger
rules - Variable in class crystalpalace.spec.LinkResult
Yara rules (if generated)
run(byte[], Map) - Method in class crystalpalace.spec.LinkSpec
Deprecated.
as of release 12.01.25. Use Capability.Parse(byte[]) and LinkSpec.run(Capability, Map)
run(Capability, Map) - Method in class crystalpalace.spec.LinkSpec
Apply this specification file's directives to the passed in parameters.
runAndGenerate(Capability, Map) - Method in class crystalpalace.spec.LinkSpec
Apply this specification file's directives to the passed in parameters AND generate yara rules.
runConfig(Capability, Map) - Method in class crystalpalace.spec.LinkSpec
Apply this specification file's directives to the passed in vars to set variables.
runDll(byte[], Map) - Method in class crystalpalace.spec.LinkSpec
Deprecated.
as of release 12.01.25. Use Capability.ParseDll(byte[]) and LinkSpec.run(Capability, Map)
runObject(byte[], Map) - Method in class crystalpalace.spec.LinkSpec
Deprecated.
as of release 12.01.25. Use Capability.ParseObject(byte[]) and LinkSpec.run(Capability, Map)

S

source - Variable in class crystalpalace.spec.SpecMessage
the source of the message
SpecLogger - Interface in crystalpalace.spec
An interface to receive output from Crystal Palace.
SpecMessage - Class in crystalpalace.spec
An output message generated by Crystal Palace
SpecMessage(SpecProgram, String, int) - Constructor for class crystalpalace.spec.SpecMessage
Instantiate a new message
SpecParseException - Exception in crystalpalace.spec
Something went wrong while parsing a .spec file.
SpecParseException(SpecParser, String) - Constructor for exception crystalpalace.spec.SpecParseException
Construct a new SpecParseException
SpecProgramException - Exception in crystalpalace.spec
Something went wrong while applying a specification file to some values
SpecProgramException(SpecProgram, String) - Constructor for exception crystalpalace.spec.SpecProgramException
Construct a new program exception.

T

targets(String) - Method in class crystalpalace.spec.LinkSpec
Check if this specification has this specific target.
toString() - Method in class crystalpalace.spec.Capability
Get the string representation of our capability
toString() - Method in class crystalpalace.spec.SpecMessage
Format our message into a pleasing enough string representation
toString() - Method in exception crystalpalace.spec.SpecParseException
Convert this exception to a human readable string.
toString() - Method in exception crystalpalace.spec.SpecProgramException
Generate a sane string representation of this error and the context where it occurred.
type - Variable in class crystalpalace.spec.SpecMessage
type of the message

W

Warn(SpecProgram, String) - Static method in class crystalpalace.spec.SpecMessage
Log a warning message (e.g., something the user should know, but shouldn't halt the linking process)
A B C D E G H I K L M N P R S T W 
All Classes All Packages