PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
Classes | Namespaces
hook_targets_resolver.h File Reference
#include "scan_report.h"
#include "code_scanner.h"

Go to the source code of this file.

Classes

class  pesieve::HookTargetResolver
 Processes the list of the collected patches (preprocessed by PatchAnalyzer), and for those of them that were detected as hooks, it resolves information about to which modules do they lead to. More...
 

Namespaces

namespace  pesieve