![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|

Static Public Attributes | |
| int | SHELLC_NONE = 0 |
| int | SHELLC_PATTERNS = 1 |
| int | SHELLC_STATS = 2 |
| int | SHELLC_PATTERNS_OR_STATS = 3 |
| int | SHELLC_PATTERNS_AND_STATS = 4 |
| int | SHELLC_COUNT = 5 |
Definition at line 28 of file pesieve.py.
|
static |
Definition at line 34 of file pesieve.py.
|
static |
Definition at line 29 of file pesieve.py.
|
static |
Definition at line 30 of file pesieve.py.
|
static |
Definition at line 33 of file pesieve.py.
|
static |
Definition at line 32 of file pesieve.py.
|
static |
Definition at line 31 of file pesieve.py.