 |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
Loading...
Searching...
No Matches
|
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <windows.h>#include <string>#include <map>#include <peconv.h>#include "scan_report.h"#include "module_data.h"Go to the source code of this file.
Classes | |
| class | pesieve::ProcessScanner |
| The root scanner, responsible for enumerating all the elements to be scanned within a given process, and performing apropriate scans on them. More... | |
Namespaces | |
| namespace | pesieve |
1.10.0