id: 1 unit: function Ransomware.PathHistory() file: ransomware/artifact.lua start line: 2553 end line: 2860 size: 276 LOC McCabe index: 47 number of parameters: 2 id: 2 unit: function Ransomware:TotalIndividualScore() file: ransomware/artifact.lua start line: 3446 end line: 3617 size: 152 LOC McCabe index: 28 number of parameters: 2 id: 3 unit: function Ransomware.AbnormalExtensionCheck() file: ransomware/artifact.lua start line: 3092 end line: 3268 size: 130 LOC McCabe index: 19 number of parameters: 2 id: 4 unit: function Production:Main() file: ransomware/artifact.lua start line: 3941 end line: 4077 size: 82 LOC McCabe index: 22 number of parameters: 1 id: 5 unit: function Production.TrendAnalysis() file: ransomware/artifact.lua start line: 3782 end line: 3870 size: 64 LOC McCabe index: 11 number of parameters: 1 id: 6 unit: function utils.PrintExtensionTables() file: ransomware/artifact.lua start line: 252 end line: 310 size: 57 LOC McCabe index: 13 number of parameters: 1 id: 7 unit: function alert.GenerateAlert() file: ransomware/artifact.lua start line: 538 end line: 613 size: 57 LOC McCabe index: 12 number of parameters: 2 id: 8 unit: function CanaryStartup() file: ransomware/artifact.lua start line: 2247 end line: 2329 size: 55 LOC McCabe index: 12 number of parameters: 0 id: 9 unit: function alert.GenerateEndgameAlert() file: ransomware/artifact.lua start line: 619 end line: 692 size: 51 LOC McCabe index: 11 number of parameters: 2 id: 10 unit: local calculateTrendScore = function() file: ransomware/artifact.lua start line: 3341 end line: 3410 size: 50 LOC McCabe index: 12 number of parameters: 2 id: 11 unit: function EventsSummary() file: ransomware/artifact.lua start line: 2177 end line: 2236 size: 49 LOC McCabe index: 9 number of parameters: 0 id: 12 unit: function Production.ExtendEventThresholdCheck() file: ransomware/artifact.lua start line: 3685 end line: 3770 size: 48 LOC McCabe index: 12 number of parameters: 1 id: 13 unit: function utils.IsOfficeLockFile() file: ransomware/artifact.lua start line: 198 end line: 246 size: 45 LOC McCabe index: 4 number of parameters: 2 id: 14 unit: function Ransomware:EventData() file: ransomware/artifact.lua start line: 2407 end line: 2468 size: 45 LOC McCabe index: 5 number of parameters: 1 id: 15 unit: function Ransomware.HeaderComparison() file: ransomware/artifact.lua start line: 2894 end line: 2957 size: 44 LOC McCabe index: 11 number of parameters: 3 id: 16 unit: function Production:TotalProcessScore() file: ransomware/artifact.lua start line: 3879 end line: 3931 size: 38 LOC McCabe index: 8 number of parameters: 2 id: 17 unit: function globals.BuildCanaries() file: ransomware/artifact.lua start line: 2037 end line: 2085 size: 37 LOC McCabe index: 6 number of parameters: 0 id: 18 unit: function utils.CurrentVersionLessThan() file: ransomware/artifact.lua start line: 442 end line: 498 size: 36 LOC McCabe index: 11 number of parameters: 1 id: 19 unit: function Ransomware:EntropyComparison() file: ransomware/artifact.lua start line: 2984 end line: 3022 size: 33 LOC McCabe index: 8 number of parameters: 4 id: 20 unit: function utils.PrintTable() file: ransomware/artifact.lua start line: 354 end line: 388 size: 32 LOC McCabe index: 7 number of parameters: 1 id: 21 unit: function globals.UpdateExtensionTables() file: ransomware/artifact.lua start line: 2001 end line: 2034 size: 32 LOC McCabe index: 12 number of parameters: 2 id: 22 unit: function Ransomware.ProcessData() file: ransomware/artifact.lua start line: 2364 end line: 2401 size: 32 LOC McCabe index: 1 number of parameters: 2 id: 23 unit: function Ransomware:RenameCheck() file: ransomware/artifact.lua start line: 3045 end line: 3083 size: 32 LOC McCabe index: 9 number of parameters: 1 id: 24 unit: function globals.Lua_CanaryCheck() file: ransomware/artifact.lua start line: 1866 end line: 1900 size: 31 LOC McCabe index: 8 number of parameters: 1 id: 25 unit: function utils.NormalizePath() file: ransomware/artifact.lua start line: 150 end line: 190 size: 30 LOC McCabe index: 7 number of parameters: 1 id: 26 unit: function globals.Canary() file: ransomware/artifact.lua start line: 1798 end line: 1837 size: 29 LOC McCabe index: 6 number of parameters: 5 id: 27 unit: function utils.PrintOperationTables() file: ransomware/artifact.lua start line: 316 end line: 349 size: 28 LOC McCabe index: 7 number of parameters: 1 id: 28 unit: function alert.GenerateElasticAlert() file: ransomware/artifact.lua start line: 698 end line: 748 size: 28 LOC McCabe index: 6 number of parameters: 2 id: 29 unit: def create_target_files() file: ransomware/testing/mock_ransomware.py start line: 0 end line: 0 size: 28 LOC McCabe index: 4 number of parameters: 3 id: 30 unit: function GarbageCollect() file: ransomware/artifact.lua start line: 2095 end line: 2128 size: 27 LOC McCabe index: 6 number of parameters: 0 id: 31 unit: function globals.CleanEventData() file: ransomware/artifact.lua start line: 1969 end line: 1994 size: 22 LOC McCabe index: 6 number of parameters: 1 id: 32 unit: function Ransomware:AppendChildProcesses() file: ransomware/artifact.lua start line: 3629 end line: 3664 size: 22 LOC McCabe index: 5 number of parameters: 2 id: 33 unit: function globals.CheckForQueuedDiagnosticAlert() file: ransomware/artifact.lua start line: 1940 end line: 1964 size: 20 LOC McCabe index: 6 number of parameters: 1 id: 34 unit: function Ransomware.DuplicateEventCheck() file: ransomware/artifact.lua start line: 2525 end line: 2544 size: 19 LOC McCabe index: 6 number of parameters: 2 id: 35 unit: function Ransomware.SetExtensionData() file: ransomware/artifact.lua start line: 2474 end line: 2492 size: 18 LOC McCabe index: 5 number of parameters: 1 id: 36 unit: def main() file: ransomware/testing/mock_ransomware.py start line: 0 end line: 0 size: 17 LOC McCabe index: 2 number of parameters: 0 id: 37 unit: function globals.CreateCanaryContent() file: ransomware/artifact.lua start line: 1841 end line: 1862 size: 16 LOC McCabe index: 2 number of parameters: 0 id: 38 unit: function GetGlobals() file: ransomware/artifact.lua start line: 2131 end line: 2149 size: 16 LOC McCabe index: 3 number of parameters: 0 id: 39 unit: function Ransomware:HeaderCheck() file: ransomware/artifact.lua start line: 2867 end line: 2885 size: 16 LOC McCabe index: 4 number of parameters: 2 id: 40 unit: function utils.Copy() file: ransomware/artifact.lua start line: 82 end line: 96 size: 15 LOC McCabe index: 4 number of parameters: 2 id: 41 unit: function RemoveProcessData() file: ransomware/artifact.lua start line: 2153 end line: 2173 size: 15 LOC McCabe index: 3 number of parameters: 1 id: 42 unit: function Ransomware:CanaryCheck() file: ransomware/artifact.lua start line: 3276 end line: 3294 size: 14 LOC McCabe index: 3 number of parameters: 2 id: 43 unit: function Ransomware:SendStopActiveAnalysisMsg() file: ransomware/artifact.lua start line: 2505 end line: 2519 size: 12 LOC McCabe index: 1 number of parameters: 1 id: 44 unit: function utils.GetAllUserProfiles() file: ransomware/artifact.lua start line: 409 end line: 422 size: 11 LOC McCabe index: 3 number of parameters: 0 id: 45 unit: function Ransomware:new() file: ransomware/artifact.lua start line: 2347 end line: 2357 size: 11 LOC McCabe index: 1 number of parameters: 1 id: 46 unit: function Ransomware.EntropyMismatch() file: ransomware/artifact.lua start line: 3029 end line: 3039 size: 10 LOC McCabe index: 2 number of parameters: 2 id: 47 unit: function utils.RemoveAdsFromPath() file: ransomware/artifact.lua start line: 113 end line: 125 size: 9 LOC McCabe index: 3 number of parameters: 1 id: 48 unit: function utils.Split() file: ransomware/artifact.lua start line: 44 end line: 51 size: 8 LOC McCabe index: 2 number of parameters: 2 id: 49 unit: function utils.TableHasValue() file: ransomware/artifact.lua start line: 65 end line: 73 size: 8 LOC McCabe index: 3 number of parameters: 2 id: 50 unit: function utils.RemoveAdsFromExtension() file: ransomware/artifact.lua start line: 132 end line: 141 size: 8 LOC McCabe index: 2 number of parameters: 2 id: 51 unit: function main() file: ransomware/artifact.lua start line: 2333 end line: 2342 size: 8 LOC McCabe index: 2 number of parameters: 1 id: 52 unit: function Ransomware:EntropyCheck() file: ransomware/artifact.lua start line: 2966 end line: 2974 size: 8 LOC McCabe index: 2 number of parameters: 2 id: 53 unit: function utils.ExtensionData() file: ransomware/artifact.lua start line: 17 end line: 23 size: 7 LOC McCabe index: 1 number of parameters: 3 id: 54 unit: function utils.Hexlify() file: ransomware/artifact.lua start line: 30 end line: 38 size: 7 LOC McCabe index: 2 number of parameters: 1 id: 55 unit: function utils.StringToByteArray() file: ransomware/artifact.lua start line: 101 end line: 107 size: 7 LOC McCabe index: 2 number of parameters: 1 id: 56 unit: function utils.GetProduct() file: ransomware/artifact.lua start line: 426 end line: 435 size: 7 LOC McCabe index: 2 number of parameters: 0 id: 57 unit: function utils.IsVersionAvailable() file: ransomware/artifact.lua start line: 503 end line: 509 size: 7 LOC McCabe index: 2 number of parameters: 0 id: 58 unit: function Ransomware.IsRansomExtension() file: ransomware/artifact.lua start line: 3301 end line: 3308 size: 7 LOC McCabe index: 2 number of parameters: 1 id: 59 unit: def handle_remote_readonly() file: ransomware/testing/mock_ransomware.py start line: 0 end line: 0 size: 7 LOC McCabe index: 2 number of parameters: 3 id: 60 unit: function alert.RaiseFileAlertMetric() file: ransomware/artifact.lua start line: 525 end line: 531 size: 6 LOC McCabe index: 2 number of parameters: 2 id: 61 unit: function utils.DebugLog() file: ransomware/artifact.lua start line: 399 end line: 405 size: 5 LOC McCabe index: 2 number of parameters: 1 id: 62 unit: function EnableLogging() file: ransomware/artifact.lua start line: 2239 end line: 2243 size: 5 LOC McCabe index: 1 number of parameters: 0 id: 63 unit: function utils.TableHasKey() file: ransomware/artifact.lua start line: 57 end line: 59 size: 3 LOC McCabe index: 1 number of parameters: 2 id: 64 unit: function globals.SetConfig() file: ransomware/artifact.lua start line: 1903 end line: 1905 size: 3 LOC McCabe index: 1 number of parameters: 1 id: 65 unit: function globals.SetExtensionMap() file: ransomware/artifact.lua start line: 1908 end line: 1910 size: 3 LOC McCabe index: 1 number of parameters: 1 id: 66 unit: function globals.SetIgnorePaths() file: ransomware/artifact.lua start line: 1913 end line: 1915 size: 3 LOC McCabe index: 1 number of parameters: 1 id: 67 unit: function globals.SwitchNamespace() file: ransomware/artifact.lua start line: 1926 end line: 1928 size: 3 LOC McCabe index: 1 number of parameters: 1 id: 68 unit: function Ransomware.StopActiveAnalysis() file: ransomware/artifact.lua start line: 2497 end line: 2499 size: 3 LOC McCabe index: 1 number of parameters: 1 id: 69 unit: def get_random_string() file: ransomware/testing/mock_ransomware.py start line: 0 end line: 0 size: 2 LOC McCabe index: 2 number of parameters: 1 id: 70 unit: function Ransomware.RansomNoteCheck() file: ransomware/artifact.lua start line: 3314 end line: 0 size: 0 LOC McCabe index: 1 number of parameters: 0