PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
demo.py File Reference

Go to the source code of this file.

Namespaces

namespace  demo

Variables

 demo.params = pesieve.t_params()
 demo.pid
 demo.dotnet_policy
 demo.imprec_mode
 demo.quiet
 demo.out_filter
 demo.no_hooks
 demo.shellcode
 demo.obfuscated
 demo.threads
 demo.iat
 demo.data
 demo.minidump
 demo.dump_mode
 demo.json_output
 demo.make_reflection
 demo.use_cache
 demo.json_lvl
 demo.results_filter
 demo.output_dir
str demo.ignored = b'ignored1;ignored2'
 demo.modules_ignored
 demo.length
 demo.buffer
 demo.pattern_file
 demo.report
 demo.json
 demo.out_size