PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
Namespaces | Functions | Variables
process_util.cpp File Reference
#include "process_util.h"
#include <iostream>

Go to the source code of this file.

Namespaces

namespace  pesieve
 
namespace  pesieve::util
 

Functions

 pesieve::util::BOOL (WINAPI *g_IsWow64Process)(IN HANDLE = nullptr
 
HMODULE pesieve::util::get_kernel32_hndl ()
 

Variables

HMODULE pesieve::util::g_kernel32Hndl = nullptr
 
OUT pesieve::util::PBOOL = nullptr
 
IN OUT PWOW64_CONTEXT pesieve::util::lpContext = nullptr
 
Generated by doxygen 1.13.2