Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
BSD 2-Clause "Simplified" License
3.06k
stars
425
forks
source link
Broken hexadecimal PID #65
Closed
hasherezade closed 4 years ago
After the recent refactoring, parsing of the hexadecimal PID no longer works.