PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
process_details.h
Go to the documentation of this file.
1#pragma once
2
3#include <windows.h>
4
5namespace pesieve {
6
7 typedef struct _process_details
8 {
10 : isReflection(false), isDEP(false) {}
11
12 _process_details(bool _isReflection, bool _isDEP)
13 : isReflection(_isReflection), isDEP(_isDEP) {}
14
16 {
17 this->isReflection = other.isReflection;
18 this->isDEP = other.isDEP;
19 }
20
22 bool isDEP;
23
25
26}; // namespace pesieve
struct pesieve::_process_details process_details
_process_details(bool _isReflection, bool _isDEP)
_process_details(const _process_details &other)