HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <windows.h>
#include <psapi.h>
#include <string>
#include <vector>
#include <set>
#include "hh_params.h"
#include "hh_report.h"
Go to the source code of this file.
Classes | |
class | HHScanner |
Typedefs | |
typedef enum single_status | t_single_scan_status |
Enumerations | |
enum | single_status { SSCAN_ERROR1 = (-2) , SSCAN_ERROR0 = (-1) , SSCAN_NOT_MATCH = 0 , SSCAN_IGNORED = 1 , SSCAN_SUCCESS = 2 , SSCAN_READY = 3 } |
Variables | |
t_hh_params | g_hh_args |
typedef enum single_status t_single_scan_status |
enum single_status |
Enumerator | |
---|---|
SSCAN_ERROR1 | |
SSCAN_ERROR0 | |
SSCAN_NOT_MATCH | |
SSCAN_IGNORED | |
SSCAN_SUCCESS | |
SSCAN_READY |
Definition at line 15 of file hh_scanner.h.
|
extern |