PE-sieve: scanners/process_feature_scanner.h File Reference

PE-sieve

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Loading...

Searching...

No Matches

scanners

#include <windows.h>
#include <map>
#include <peconv.h>
#include "scan_report.h"

Go to the source code of this file.

Classes
class	pesieve::ProcessFeatureScanner
	A base class for all the scanners checking appropriate process' features. More...

Namespaces
namespace	pesieve