Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
83,087 visible repositories in the index
1–2 of 2 · Most stars
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.