pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

HWSyscalls

HWSyscalls Principales contribuyentes Descripción HWSyscalls es un nuevo método para ejecutar syscalls indirectas usando 3 componentes principales: Puntos de interrupción de hardware y un Vectored Exception Handler para controlar el flujo de ejecución. HalosGate se utiliza para encontrar los...