Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
BSD 2-Clause "Simplified" License
3.03k
stars
423
forks
source link
Make PE dump optional #3
Closed
Neo23x0 closed 6 years ago
Untested - I currently have no build environment at hand