HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
etw_listener.h
Go to the documentation of this file.
1#pragma once
2
3#if (_MSC_VER >= 1900 )
4 #define __USE_ETW__ //krabsetw is only supported with Visual Studio 2015 and above (MSVC++ 14.0)
5#endif
6
7#ifdef __USE_ETW__
8
9#define WIN32_LEAN_AND_MEAN
10#include <stdio.h>
11#include <iostream>
12#include <limits.h>
13#include <string>
14
15#include <sstream>
16#include <winsock2.h>
17#include <windows.h>
18#include <time.h>
19
20// ETW includes
21#include "krabsetw/krabs/krabs.hpp"
22#include "etw_settings.h"
23
24
25bool ETWstart(ETWProfile &settings);
26
27#endif //__USE_ETW__