PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Toggle main menu visibility
Main Page
Namespaces
Namespace List
Namespace Members
All
_
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Functions
_
b
c
d
e
f
g
h
i
l
m
n
o
p
q
r
s
t
v
w
Variables
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
w
Typedefs
Enumerations
Enumerator
c
h
i
p
s
t
Classes
Class List
Class Index
Class Hierarchy
Class Members
All
_
a
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
~
Functions
_
a
b
c
d
e
f
g
h
i
l
m
n
o
p
r
s
t
u
v
w
~
Variables
_
a
b
c
d
e
f
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Typedefs
Enumerations
Enumerator
i
o
r
s
Related Symbols
Files
File List
File Members
All
a
b
c
d
e
f
g
h
i
j
l
m
o
p
r
s
t
u
Functions
Variables
Typedefs
Enumerations
Enumerator
j
o
p
r
s
Macros
c
d
e
g
h
i
l
m
o
p
r
u
•
All
Classes
Namespaces
Files
Functions
Variables
Typedefs
Enumerations
Enumerator
Friends
Macros
Pages
Loading...
Searching...
No Matches
params_info
Namespaces
|
Functions
pe_sieve_params_info.h File Reference
#include <iostream>
#include <
pe_sieve_types.h
>
Go to the source code of this file.
Namespaces
namespace
pesieve
Functions
std::string
pesieve::translate_dump_mode
(const DWORD dump_mode)
std::string
pesieve::translate_out_filter
(const
pesieve::t_output_filter
o_filter)
std::string
pesieve::translate_results_filter
(const
pesieve::t_results_filter
r_filter)
std::string
pesieve::results_filter_to_id
(const DWORD r_filter)
std::string
pesieve::translate_data_mode
(const
pesieve::t_data_scan_mode
&mode)
std::string
pesieve::translate_imprec_mode
(const
pesieve::t_imprec_mode
imprec_mode)
std::string
pesieve::translate_dotnet_policy
(const
pesieve::t_dotnet_policy
&mode)
std::string
pesieve::translate_iat_scan_mode
(const
pesieve::t_iat_scan_mode
mode)
std::string
pesieve::translate_json_level
(const
pesieve::t_json_level
&mode)
std::string
pesieve::translate_shellc_mode
(const
pesieve::t_shellc_mode
&mode)
std::string
pesieve::shellc_mode_mode_to_id
(const
pesieve::t_shellc_mode
&mode)
std::string
pesieve::translate_obfusc_mode
(const
pesieve::t_obfusc_mode
&mode)
std::string
pesieve::obfusc_mode_mode_to_id
(const
pesieve::t_obfusc_mode
&mode)
std::string
pesieve::dump_mode_to_id
(const DWORD dump_mode)
std::string
pesieve::imprec_mode_to_id
(const
pesieve::t_imprec_mode
imprec_mode)
Generated by
1.13.2