PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pe_sieve_return_codes.h
Go to the documentation of this file.
1
6#pragma once
7
8// return codes for PE-sieve.exe:
@ PESIEVE_NOT_DETECTED
the process was scanned successfuly, and NO suspicious indicators are detected
@ PESIEVE_DETECTED
the process was scanned successfuly, and some suspicious indicators are detected
@ PESIEVE_ERROR
the scan has failed, PE-sieve returned an error
@ PESIEVE_INFO
PE-sieve was deployed in the info mode (i.e. displaying help)