PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
A class responsible for filling in the statistics with the data from the particular buffer. More...
#include <stats.h>
Public Member Functions | |
AreaStatsCalculator (const util::ByteBuffer &_buffer) | |
bool | fill (AreaStats &stats, StatsSettings *settings) |
A class responsible for filling in the statistics with the data from the particular buffer.
|
inline |
|
inline |