← All tools

pe-sieve

https://hshrzd.wordpress.com/pe-sieve/

Open Source

Categories

Forensics

Description

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Keywords

anti-malware hooking libpeconv malware-analysis memory-forensics pe-analyzer pe-dumper pe-format pe-sieve process-analyzer scans c++

Example Usage

git clone --recursive https://github.com/hasherezade/pe-sieve.git