 |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
Loading...
Searching...
No Matches
|
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
This is the complete list of members for pesieve::IATScanner, including all inherited members.
| IATScanner(HANDLE hProc, ModuleData &moduleData, RemoteModuleData &remoteModData, const peconv::ExportsMapper &_exportsMap, IN const ModulesInfo &_modulesInfo, t_iat_scan_mode _hooksFilter) | pesieve::IATScanner | inline |
| moduleData | pesieve::ModuleScanner | protected |
| ModuleScanner(HANDLE _procHndl, ModuleData &_moduleData, RemoteModuleData &_remoteModData) | pesieve::ModuleScanner | inline |
| ProcessFeatureScanner(HANDLE _processHandle) | pesieve::ProcessFeatureScanner | inline |
| processHandle | pesieve::ProcessFeatureScanner | protected |
| remoteModData | pesieve::ModuleScanner | protected |
| scanRemote() | pesieve::IATScanner | virtual |
| ~ModuleScanner() | pesieve::ModuleScanner | inlinevirtual |
| ~ProcessFeatureScanner() | pesieve::ProcessFeatureScanner | inlinevirtual |
1.12.0