PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::PeReconstructor Member List

This is the complete list of members for pesieve::PeReconstructor, including all inherited members.

artefactspesieve::PeReconstructorprotected
fixSectionsCharacteristics(HANDLE processHandle)pesieve::PeReconstructorprotected
fixSectionsVirtualSize(HANDLE processHandle)pesieve::PeReconstructorprotected
origArtefactspesieve::PeReconstructorprotected
peBufferpesieve::PeReconstructorprotected
PeReconstructor(PeArtefacts _artefacts, PeBuffer &_peBuffer)pesieve::PeReconstructorinline
reconstruct()pesieve::PeReconstructor
reconstructFileHdr()pesieve::PeReconstructorprotected
reconstructPeHdr()pesieve::PeReconstructorprotected
shiftPeHeader()pesieve::PeReconstructorprotected
Generated by doxygen 1.12.0