forrest-orr
|
61f1847462
|
Added signing check and colored output function
|
2020-02-22 19:22:25 -08:00 |
|
forrest-orr
|
a94c54f294
|
Added PEB module name mismatch case
|
2020-02-22 11:33:17 -08:00 |
|
forrest-orr
|
c076ce795a
|
Added PEB link mismatch case
|
2020-02-21 19:49:45 -08:00 |
|
forrest-orr
|
6f7de09e83
|
Added PEB module unlink detection
|
2020-02-21 19:24:32 -08:00 |
|
forrest-orr
|
5435e8368a
|
Fixed ansi/unicode section name bug
|
2020-02-21 14:08:51 -08:00 |
|
forrest-orr
|
f3776c42ac
|
Enhanced memdmp output
|
2020-02-21 13:15:11 -08:00 |
|
forrest-orr
|
d9d9bc412a
|
Fixed memdmp full region bug
|
2020-02-21 09:35:27 -08:00 |
|
forrest-orr
|
157b14f054
|
Added memdump from alloc base - still has bugs
|
2020-02-20 18:34:01 -08:00 |
|
forrest-orr
|
84a25c3060
|
Finalized memory dump functionality
|
2020-02-19 14:23:03 -08:00 |
|
forrest-orr
|
7d07dd66f9
|
Created memory dump class
|
2020-02-19 11:04:36 -05:00 |
|
forrest-orr
|
56be1bea02
|
Consolidated AddressSpace/Process classes and added dump option
|
2020-02-18 09:32:56 -08:00 |
|
forrest-orr
|
722d004d30
|
Added correlation between threads and processes/sblocks
|
2020-02-16 09:45:07 -08:00 |
|