![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|

Static Public Attributes | |
| int | SHOW_NONE = 0 |
| int | SHOW_ERRORS = 1 |
| int | SHOW_NOT_SUSPICIOUS = 2 |
| int | SHOW_SUSPICIOUS = 4 |
| int | SHOW_SUSPICIOUS_AND_ERRORS = 5 |
| int | SHOW_SUCCESSFUL_ONLY = 6 |
| int | SHOW_ALL = 7 |
Definition at line 89 of file pesieve.py.
|
static |
Definition at line 96 of file pesieve.py.
|
static |
Definition at line 91 of file pesieve.py.
|
static |
Definition at line 90 of file pesieve.py.
|
static |
Definition at line 92 of file pesieve.py.
|
static |
Definition at line 95 of file pesieve.py.
|
static |
Definition at line 93 of file pesieve.py.
|
static |
Definition at line 94 of file pesieve.py.