PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Toggle main menu visibility
Main Page
Namespaces
Namespace List
Namespace Members
All
_
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Functions
_
b
c
d
e
f
g
h
i
l
m
n
o
p
q
r
s
t
v
w
Variables
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
w
Typedefs
Enumerations
Enumerator
c
h
i
p
s
t
Classes
Class List
Class Index
Class Hierarchy
Class Members
All
_
a
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
~
Functions
_
a
b
c
d
e
f
g
h
i
l
m
n
o
p
r
s
t
u
v
w
~
Variables
_
a
b
c
d
e
f
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Typedefs
Enumerations
Enumerator
i
o
r
s
Related Symbols
Files
File List
File Members
All
a
b
c
d
e
f
g
h
i
j
l
m
o
p
r
s
t
u
Functions
Variables
Typedefs
Enumerations
Enumerator
j
o
p
r
s
Macros
c
d
e
g
h
i
l
m
o
p
r
u
•
All
Classes
Namespaces
Files
Functions
Variables
Typedefs
Enumerations
Enumerator
Friends
Macros
Pages
Loading...
Searching...
No Matches
Here is a list of all functions with links to the files they belong to:
alloc_strparam() :
params.h
DllMain() :
dll_main.cpp
enum_stack_thread() :
thread_scanner.cpp
free_params() :
main.cpp
free_strparam() :
params.h
get_full_path() :
path_util.cpp
get_page_details() :
thread_scanner.cpp
get_thunk_at_rva() :
iat_scanner.cpp
is_device_path() :
path_converter.cpp
main() :
main.cpp
PESieve_help() :
pe_sieve_api.h
,
pe_sieve_api.cpp
PESieve_scan() :
pe_sieve_api.h
,
pe_sieve_api.cpp
PESieve_scan_ex() :
pe_sieve_api.h
,
pe_sieve_api.cpp
print_report() :
main.cpp
,
pe_sieve_api.cpp
set_non_suspicious() :
scanner.cpp
should_scan_context() :
thread_scanner.cpp
translate_integrity_level() :
process_privilege.cpp
Generated by
1.13.2