HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
This is the complete list of members for HHScanReport, including all inherited members.
appendReport(pesieve::t_report &scan_report, const std::wstring &img_name) | HHScanReport | |
countReports(const pesieve::t_results_filter rfilter) const | HHScanReport | inline |
countTotal(bool successfulOnly=true) const | HHScanReport | inline |
endTick | HHScanReport | protected |
endTime | HHScanReport | protected |
failed | HHScanReport | protected |
getScanTime() const | HHScanReport | inline |
HHScanner class | HHScanReport | friend |
HHScanReport(DWORD start_tick, time_t start_time) | HHScanReport | inline |
pidToName | HHScanReport | protected |
pidToReport | HHScanReport | protected |
reportsToJSON(std::wstringstream &stream, size_t level, const t_hh_params ¶ms) | HHScanReport | protected |
reportsToString(std::wstringstream &stream, const pesieve::t_results_filter rfilter) | HHScanReport | protected |
setEndTick(DWORD end_tick, time_t end_time) | HHScanReport | inline |
startTick | HHScanReport | protected |
startTime | HHScanReport | protected |
suspicious | HHScanReport | protected |
toJSON(std::wstringstream &stream, const t_hh_params ¶ms) | HHScanReport | protected |
toString(std::wstringstream &stream, const pesieve::t_results_filter rfilter) | HHScanReport |