2 results found Sort:

hasherezade
pe-sieve hasherezade
442
3.2k
bsd-2-clause
104
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
scans hooking pe-sieve libpeconv pe-dumper pe-format pe-analyzer anti-malware malware-analysis memory-forensics process-analyzer
Created 2017-08-22
1,947 commits to master branch, last one 7 days ago
ignacioj
WhacAMole ignacioj
4
38
other
4
Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shel...
dfir pe-analyzer memory-analysis memory-analyzer malware-analysis malware-analyzer process-analysis process-analyzer malware-detection
Created 2022-02-07
116 commits to main branch, last one 5 months ago