PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Toggle main menu visibility
Main Page
Namespaces
Namespace List
Namespace Members
All
_
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Functions
_
b
c
d
e
f
g
h
i
l
m
n
o
p
q
r
s
t
v
w
Variables
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
w
Typedefs
Enumerations
Enumerator
c
h
i
p
s
t
Classes
Class List
Class Index
Class Hierarchy
Class Members
All
_
a
b
c
d
e
f
g
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
~
Functions
_
a
b
c
d
e
f
g
h
i
l
m
n
o
p
r
s
t
u
v
w
~
Variables
_
a
b
c
d
e
f
h
i
j
l
m
n
o
p
q
r
s
t
u
v
w
Typedefs
Enumerations
Enumerator
i
o
r
s
Related Symbols
Files
File List
File Members
All
a
b
c
d
e
f
g
h
i
j
l
m
o
p
r
s
t
u
Functions
Variables
Typedefs
Enumerations
Enumerator
j
o
p
r
s
Macros
c
d
e
g
h
i
l
m
o
p
r
u
•
All
Classes
Namespaces
Files
Functions
Variables
Typedefs
Enumerations
Enumerator
Friends
Macros
Pages
Loading...
Searching...
No Matches
utils
process_privilege.h
Go to the documentation of this file.
1
#pragma once
2
3
#include <windows.h>
4
5
namespace
pesieve
{
6
namespace
util
{
7
8
typedef
enum
{
9
INTEGRITY_UNKNOWN
= -1,
10
INTEGRITY_LOW
= 0,
11
INTEGRITY_MEDIUM
,
//1
12
INTEGRITY_HIGH
,
//2
13
INTEGRITY_SYSTEM
//3
14
}
process_integrity_t
;
8
typedef
enum
{
…
};
15
16
bool
set_debug_privilege
();
17
18
process_integrity_t
get_integrity_level
(HANDLE hProcess);
19
20
bool
is_DEP_enabled
(HANDLE hProcess);
21
};
22
};
pesieve::util
Definition
artefact_scanner.cpp:12
pesieve::util::get_integrity_level
process_integrity_t get_integrity_level(HANDLE hProcess)
Definition
process_privilege.cpp:159
pesieve::util::process_integrity_t
process_integrity_t
Definition
process_privilege.h:8
pesieve::util::INTEGRITY_MEDIUM
@ INTEGRITY_MEDIUM
Definition
process_privilege.h:11
pesieve::util::INTEGRITY_LOW
@ INTEGRITY_LOW
Definition
process_privilege.h:10
pesieve::util::INTEGRITY_HIGH
@ INTEGRITY_HIGH
Definition
process_privilege.h:12
pesieve::util::INTEGRITY_SYSTEM
@ INTEGRITY_SYSTEM
Definition
process_privilege.h:13
pesieve::util::INTEGRITY_UNKNOWN
@ INTEGRITY_UNKNOWN
Definition
process_privilege.h:9
pesieve::util::set_debug_privilege
bool set_debug_privilege()
Definition
process_privilege.cpp:107
pesieve::util::is_DEP_enabled
bool is_DEP_enabled(HANDLE hProcess)
Definition
process_privilege.cpp:210
pesieve
Definition
pesieve.py:1
Generated by
1.13.2