![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <windows.h>#include <string>#include <set>#include <sstream>#include <iomanip>#include "strings_util.h"Go to the source code of this file.
Namespaces | |
| namespace | pesieve |
| namespace | pesieve::util |
Macros | |
| #define | OUT_PADDED(stream, field_size, str) |
Functions | |
| long | pesieve::util::get_number (const char *buf) |
| bool | pesieve::util::is_number (const char *buf) |
| bool | pesieve::util::is_in_list (std::string searched_string, std::set< std::string > &string_list, bool to_lower=true) |
| size_t | pesieve::util::string_to_list (IN::std::string s, IN char _delim, OUT std::set< std::string > &elements_list, bool to_lower=true) |
| #define OUT_PADDED | ( | stream, | |
| field_size, | |||
| str ) |
Definition at line 12 of file format_util.h.