| Name | Description |
|---|---|
| Candidate | Collects information about a potential candidate for an entry point. The subclass type determines the type of executable (native binary, interpreted script, etc.). |
| Detection | Provides automatic detection of entry point Candidates. |
| DetectionTest | |
| DotNetExe | A .NET/Mono executable. |
| DotNetExeTest | |
| InterpretedScript | A plain text script that is executed by a runtime interpreter. |
| Java | A compiled Java application. |
| JavaClass | A compiled Java class file. |
| JavaJar | A Java JAR archive. |
| MacOSApp | A binary inside a MacOS X application bundle. |
| NativeExecutable | A file that can be executed directly by the operating system without an additional runtime environment. |
| PerlScript | A script written in Perl. |
| PhpScript | A script written in PHP. |
| PosixBinary | An ELF (Executable and Linkable Format) binary for a POSIX-style operation system. |
| PosixBinaryTest | |
| PosixExecutable | Any file with the POSIX executable bit (xbit) set. |
| PosixScript | A shebang (#!) script for execution on a POSIX-style operating system. |
| PosixScriptTest | |
| PowerShellScript | A script written in PowerShell. |
| PythonScript | A script written in Python. |
| PythonScriptTest | |
| RubyScript | A script written in Ruby. |
| WindowsBatch | A Windows batch file/script. |
| WindowsExe | A native PE (Portable Executable) for Windows. |
| WindowsExeTest |