PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <iat_block.h>
Public Member Functions | |
bool | operator() (const IATThunksSeries *lhs, const IATThunksSeries *rhs) const |
Definition at line 67 of file iat_block.h.
|
inline |
Definition at line 69 of file iat_block.h.