PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Toggle main menu visibility
Main Page
Namespaces
Namespace List
Namespace Members
All
_
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Functions
_
b
c
d
e
f
g
h
i
l
m
n
o
p
q
r
s
t
v
w
Variables
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
w
Typedefs
Enumerations
Enumerator
c
h
i
p
s
t
Classes
Class List
Class Index
Class Hierarchy
Class Members
All
_
a
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
~
Functions
_
a
b
c
d
e
f
g
h
i
l
m
n
o
p
r
s
t
u
v
w
~
Variables
_
a
b
c
d
e
f
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Typedefs
Enumerations
Enumerator
i
o
r
s
Related Symbols
Files
File List
File Members
All
a
b
c
d
e
f
g
h
i
j
l
m
o
p
r
s
t
u
Functions
Variables
Typedefs
Enumerations
Enumerator
j
o
p
r
s
Macros
c
d
e
g
h
i
l
m
o
p
r
u
•
All
Classes
Namespaces
Files
Functions
Variables
Typedefs
Enumerations
Enumerator
Friends
Macros
Pages
Loading...
Searching...
No Matches
scanners
hook_targets_resolver.h
Go to the documentation of this file.
1
#pragma once
2
3
#include "
scan_report.h
"
4
#include "
code_scanner.h
"
5
6
namespace
pesieve
{
7
9
class
HookTargetResolver
10
{
11
public
:
12
HookTargetResolver
(IN
ProcessScanReport
& process_report)
13
:
processReport
(process_report)
14
{
15
}
12
HookTargetResolver
(IN
ProcessScanReport
& process_report) {
…
}
16
18
size_t
resolveAllHooks
(IN OUT std::set<ModuleScanReport*> &code_reports);
19
21
bool
resolveTarget
(IN OUT
PatchList::Patch
* currPatch);
22
23
protected
:
24
ProcessScanReport
&
processReport
;
25
};
9
class
HookTargetResolver
{
…
};
26
27
};
//namespace pesieve
28
29
pesieve::HookTargetResolver::processReport
ProcessScanReport & processReport
Definition
hook_targets_resolver.h:24
pesieve::HookTargetResolver::resolveAllHooks
size_t resolveAllHooks(IN OUT std::set< ModuleScanReport * > &code_reports)
Resolves all the hooks collected within the given set of reports.
Definition
hook_targets_resolver.cpp:29
pesieve::HookTargetResolver::resolveTarget
bool resolveTarget(IN OUT PatchList::Patch *currPatch)
Resolves the information about the target of the provided hook, and fills it back into the object.
Definition
hook_targets_resolver.cpp:9
pesieve::HookTargetResolver::HookTargetResolver
HookTargetResolver(IN ProcessScanReport &process_report)
Definition
hook_targets_resolver.h:12
pesieve::PatchList::Patch
Definition
patch_list.h:23
pesieve::ProcessScanReport
The report aggregating the results of the performed scan.
Definition
scan_report.h:19
code_scanner.h
pesieve
Definition
pesieve.py:1
scan_report.h
Generated by
1.13.2