hasherezade/pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Language: C++ - Size: 131 MB - Last synced at: 8 days ago - Pushed at: 9 days ago - Stars: 3,275 - Forks: 449