PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
utils
modules_enum.h
Go to the documentation of this file.
1
#pragma once
2
3
#include <windows.h>
4
#include <stdexcept>
5
#include <vector>
6
7
namespace
pesieve
{
8
namespace
util
{
9
size_t
enum_modules
(IN HANDLE hProcess, OUT std::vector<HMODULE>& hMods, IN
DWORD
filters);
//throws exceptions
10
};
11
};
pesieve::util
Definition
artefact_scanner.cpp:12
pesieve::util::enum_modules
size_t enum_modules(IN HANDLE hProcess, OUT std::vector< HMODULE > &hMods, IN DWORD filters)
pesieve::util::DWORD
DWORD(__stdcall *_PssCaptureSnapshot)(HANDLE ProcessHandle
pesieve
Definition
pesieve.py:1
Generated by
1.16.1