PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
This is the complete list of members for pesieve::PatchList, including all inherited members.
checkForHookedExports(peconv::ExportsMapper &expMap) | pesieve::PatchList | |
deletePatches() | pesieve::PatchList | |
insert(Patch *p) | pesieve::PatchList | inline |
operator=(const PatchList &other) | pesieve::PatchList | inline |
patches | pesieve::PatchList | |
PatchList() | pesieve::PatchList | inline |
size() | pesieve::PatchList | inline |
toJSON(std::stringstream &outs, size_t level, bool short_info) | pesieve::PatchList | |
toTAGs(std::ofstream &patch_report, const char delimiter) | pesieve::PatchList | |
~PatchList() | pesieve::PatchList | inlinevirtual |