PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::util::ProcessRefl Struct Reference

#include <process_reflection.h>

Public Member Functions

 ProcessRefl (HANDLE _hReflHndl, HANDLE _snapshot=NULL)
virtual ~ProcessRefl ()
bool releaseReflectedHndl ()

Public Attributes

HANDLE hReflHndl
HANDLE snapshot

Detailed Description

Definition at line 11 of file process_reflection.h.

Constructor & Destructor Documentation

◆ ProcessRefl()

pesieve::util::ProcessRefl::ProcessRefl ( HANDLE _hReflHndl,
HANDLE _snapshot = NULL )
inline

Definition at line 14 of file process_reflection.h.

◆ ~ProcessRefl()

pesieve::util::ProcessRefl::~ProcessRefl ( )
virtual

Definition at line 336 of file process_reflection.cpp.

Here is the call graph for this function:

Member Function Documentation

◆ releaseReflectedHndl()

bool pesieve::util::ProcessRefl::releaseReflectedHndl ( )

Definition at line 345 of file process_reflection.cpp.

Here is the call graph for this function:

Member Data Documentation

◆ hReflHndl

HANDLE pesieve::util::ProcessRefl::hReflHndl

Definition at line 23 of file process_reflection.h.

◆ snapshot

HANDLE pesieve::util::ProcessRefl::snapshot

Definition at line 24 of file process_reflection.h.


The documentation for this struct was generated from the following files: