PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include "module_data.h"
#include "../utils/format_util.h"
#include "../utils/path_converter.h"
#include "../utils/process_util.h"
#include "../utils/artefacts_util.h"
#include "artefact_scanner.h"
#include <psapi.h>
Go to the source code of this file.
Variables | |
pesieve::ModulesCache | cache |
pesieve::ModulesCache cache |
Definition at line 14 of file module_data.cpp.