ignacioj/WhacAMole

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shellcode, memory regions, modules and processes.

语言：C++ · GitHub 星标：45 · Fork：4

话题：dfir · malware-analysis · malware-analyzer · malware-detection · memory-analysis · memory-analyzer · pe-analyzer · process-analysis

在 GitHub 上查看原仓库