PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <windows.h>
#include <string>
#include <set>
#include <sstream>
#include <iomanip>
#include "strings_util.h"
Go to the source code of this file.
Namespaces | |
namespace | pesieve |
namespace | pesieve::util |
Macros | |
#define | OUT_PADDED(stream, field_size, str) |
Functions | |
long | pesieve::util::get_number (const char *buf) |
bool | pesieve::util::is_number (const char *buf) |
bool | pesieve::util::is_in_list (std::string searched_string, std::set< std::string > &string_list, bool to_lower=true) |
size_t | pesieve::util::string_to_list (IN::std::string s, IN char _delim, OUT std::set< std::string > &elements_list, bool to_lower=true) |
#define OUT_PADDED | ( | stream, | |
field_size, | |||
str ) |
Definition at line 12 of file format_util.h.