HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
Functions | |
std::string | join_path (const std::string &baseDir, const std::string &subpath) |
std::string | make_dir_name (const std::string &baseDir, time_t timestamp) |
bool | set_output_dir (t_params &args, const std::string &new_dir) |
bool | write_to_file (const std::string &report_path, const std::wstring &summary_str, const bool append) |
std::string files_util::join_path | ( | const std::string & | baseDir, |
const std::string & | subpath ) |
Definition at line 26 of file hh_scanner.cpp.
std::string files_util::make_dir_name | ( | const std::string & | baseDir, |
time_t | timestamp ) |
Definition at line 37 of file hh_scanner.cpp.
bool files_util::set_output_dir | ( | t_params & | args, |
const std::string & | new_dir ) |
Definition at line 49 of file hh_scanner.cpp.
bool files_util::write_to_file | ( | const std::string & | report_path, |
const std::wstring & | summary_str, | ||
const bool | append ) |
Definition at line 63 of file hh_scanner.cpp.