PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
Static Public Attributes | |
int | REPORT_NONE = 0 |
int | REPORT_SCANNED = 1 |
int | REPORT_DUMPED = 2 |
int | REPORT_ALL = 3 |
Definition at line 97 of file pesieve.py.
|
static |
Definition at line 101 of file pesieve.py.
|
static |
Definition at line 100 of file pesieve.py.
|
static |
Definition at line 98 of file pesieve.py.
|
static |
Definition at line 99 of file pesieve.py.