PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
scanners Directory Reference
Directory dependency graph for scanners:
scanners

Files

 
artefact_scanner.cpp
 
artefact_scanner.h
 
code_scanner.cpp
 
code_scanner.h
 
headers_scanner.cpp
 
headers_scanner.h
 
hook_targets_resolver.cpp
 
hook_targets_resolver.h
 
iat_scanner.cpp
 
iat_scanner.h
 
mapping_scanner.cpp
 
mapping_scanner.h
 
mempage_data.cpp
 
mempage_data.h
 
module_cache.cpp
 
module_cache.h
 
module_data.cpp
 
module_data.h
 
module_scan_report.h
 
module_scanner.h
 
patch_analyzer.cpp
 
patch_analyzer.h
 
patch_list.cpp
 
patch_list.h
 
pe_section.h
 
process_details.h
 
process_feature_scanner.h
 
scan_report.cpp
 
scan_report.h
 
scanned_modules.cpp
 
scanned_modules.h
 
scanner.cpp
 
scanner.h
 
thread_scanner.cpp
 
thread_scanner.h
 
workingset_scanner.cpp
 
workingset_scanner.h