![]() |
HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <params.h>

Public Member Functions | |
| HHParams (const std::string &version) | |
| void | printBanner () |
| void | fillStruct (t_hh_params &ps) |
| void | freeStruct (t_hh_params &ps) |
Protected Member Functions | |
| bool | alloc_strparam (PARAM_STRING &strparam, size_t len) |
| void | free_strparam (pesieve::PARAM_STRING &strparam) |
| bool | fillStringParam (const std::string ¶mId, PARAM_STRING &strparam) |
| void | fillPEsieveStruct (t_params &ps) |
|
inline |
|
inlineprotected |
|
inlineprotected |
|
inlineprotected |
|
inline |
|
inlineprotected |
|
inline |
|
inline |