PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
process_minidump.h
Go to the documentation of this file.
1#pragma once
2#include <windows.h>
3#include <string>
4
5namespace pesieve {
6 namespace util {
7
8 bool make_minidump(DWORD pid, const std::string &out_file);
9 };
10};
bool make_minidump(DWORD pid, const std::string &out_file)
DWORD(__stdcall *_PssCaptureSnapshot)(HANDLE ProcessHandle