PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches

scanners → utils Relation

File in scannersIncludes file in utils
artefact_scanner.cppartefacts_util.h
artefact_scanner.cppworkingset_enum.h
artefact_scanner.hprocess_util.h
code_scanner.cppartefacts_util.h
mapping_scanner.cpppath_converter.h
mapping_scanner.hpath_util.h
mempage_data.cppprocess_util.h
mempage_data.hbyte_buffer.h
module_cache.hcustom_mutex.h
module_data.cppartefacts_util.h
module_data.cppformat_util.h
module_data.cpppath_converter.h
module_data.cppprocess_util.h
module_data.hformat_util.h
module_scan_report.hformat_util.h
module_scan_report.hpath_util.h
module_scanner.hformat_util.h
patch_list.cppformat_util.h
scan_report.cppformat_util.h
scanner.cppformat_util.h
scanner.cppmodules_enum.h
scanner.cpppath_converter.h
scanner.cppprocess_privilege.h
scanner.cppprocess_util.h
scanner.cppworkingset_enum.h
scanner.hprocess_symbols.h
thread_scanner.cppprocess_symbols.h
thread_scanner.cppprocess_util.h
thread_scanner.cppsyscall_extractor.h
thread_scanner.hprocess_symbols.h
thread_scanner.hthreads_util.h
workingset_scanner.cppartefacts_util.h
workingset_scanner.cpppath_converter.h
workingset_scanner.cppworkingset_enum.h
workingset_scanner.hformat_util.h
workingset_scanner.hworkingset_enum.h