PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
process_details.h
Go to the documentation of this file.
1#pragma once
2
3#include <windows.h>
4
5namespace pesieve {
6
7 typedef struct _process_details
8 {
11
14
16 {
17 this->isReflection = other.isReflection;
18 this->isDEP = other.isDEP;
19 }
20
22 bool isDEP;
23
25
26}; // namespace pesieve
struct pesieve::_process_details process_details
size_t fill_iat(BYTE *vBuf, size_t vBufSize, IN const peconv::ExportsMapper *exportsMap, IN OUT IATBlock &iat, IN ThunkFoundCallback *callback)
Definition iat_finder.h:31
_process_details(bool _isReflection, bool _isDEP)
_process_details(const _process_details &other)