forrest-orr
|
a6631314f1
|
Added base memory dump code for references
|
2020-04-18 13:11:20 -07:00 |
|
forrest-orr
|
a503df97d6
|
Moved user input to scanner context class
|
2020-04-17 18:28:00 -07:00 |
|
forrest-orr
|
52009a1b9d
|
Added reference selection type
|
2020-04-16 18:04:13 -07:00 |
|
forrest-orr
|
06739eaf87
|
Finished TEB/PEB 32/64 association
|
2020-04-08 10:07:14 -07:00 |
|
forrest-orr
|
8860ed79f9
|
Adding PEB query for 32/64
|
2020-04-07 14:36:17 -07:00 |
|
forrest-orr
|
af112de137
|
Typedef re-factor and section size bug fix
|
2020-04-07 13:02:50 -07:00 |
|
forrest-orr
|
c64a338e55
|
Heap debugging
|
2020-04-06 16:22:16 -07:00 |
|
forrest-orr
|
c1fb911bcd
|
Added heap filtering and attribute output
|
2020-04-06 14:51:10 -07:00 |
|
forrest-orr
|
eb09042031
|
Finished re-factor and added signing type distinction
|
2020-03-29 16:42:44 -07:00 |
|
forrest-orr
|
1dc8cad371
|
Finished typecast re-factor
|
2020-03-29 10:18:50 -07:00 |
|
forrest-orr
|
39e1a84a47
|
Typecast re-factor up to PeFile.cpp
|
2020-03-28 18:49:02 -07:00 |
|
forrest-orr
|
2c3df8bc56
|
Const vars/methods and processes namespace
|
2020-03-27 17:20:30 -07:00 |
|
forrest-orr
|
0c7b83f976
|
More cleanup
|
2020-03-26 16:34:17 -07:00 |
|
forrest-orr
|
50845f5614
|
Initial source polish
|
2020-03-24 16:23:07 -07:00 |
|
forrest-orr
|
21233d52c4
|
Banner and output syntax updates
|
2020-03-23 20:09:05 -07:00 |
|
forrest-orr
|
9d1c5ee90f
|
Added new code banner
|
2020-03-22 17:03:23 -07:00 |
|
forrest-orr
|
10fa895243
|
Cleaned up headers
|
2020-03-22 16:20:32 -07:00 |
|
forrest-orr
|
a833968b5c
|
Added banner and console color enum
|
2020-03-21 18:56:24 -07:00 |
|
forrest-orr
|
76c8aa237a
|
Added colors to output
|
2020-03-20 15:16:03 -07:00 |
|
forrest-orr
|
7759e96463
|
Consolidated interface verbosity
|
2020-03-20 11:13:56 -07:00 |
|
forrest-orr
|
224836077d
|
Consolidated classes/namespaces and headers
|
2020-03-18 14:37:25 -07:00 |
|
forrest-orr
|
a29df6563a
|
Re-structuring classes into namespaces
|
2020-03-18 11:28:52 -07:00 |
|
forrest-orr
|
192c952409
|
Update Console.cpp
|
2020-03-14 16:18:14 -07:00 |
|
forrest-orr
|
8ec027c995
|
Added scan time duration
|
2020-03-14 16:17:54 -07:00 |
|
forrest-orr
|
e5937266e3
|
PE header performance optimization
|
2020-03-14 12:06:40 -07:00 |
|
forrest-orr
|
4bc5d833fc
|
Added statistics support
|
2020-03-08 19:03:21 -07:00 |
|
forrest-orr
|
565c418070
|
Started adding statistics option
|
2020-03-08 17:08:38 -07:00 |
|
forrest-orr
|
b2df21ce1d
|
Added additional detail fields for executables
|
2020-03-08 08:55:18 -07:00 |
|
forrest-orr
|
579d79abd5
|
Block memory selection type added/tested
|
2020-03-06 16:56:44 -08:00 |
|
forrest-orr
|
46e2289a8c
|
Fixed a series of bugs - section overlap bug remains
|
2020-03-04 17:18:26 -05:00 |
|
forrest-orr
|
0bcf1729e7
|
Finished new args
|
2020-03-02 17:36:27 -08:00 |
|
forrest-orr
|
0811015996
|
Started new interface
|
2020-03-02 14:40:15 -08:00 |
|
forrest-orr
|
eadef58d9f
|
Update Console.cpp
|
2020-03-02 14:06:10 -08:00 |
|
forrest-orr
|
7b377233d9
|
Fixed suspicion dumping
|
2020-02-29 10:46:07 -08:00 |
|
forrest-orr
|
0f6a341998
|
Fixing filter bugs
|
2020-02-28 18:21:18 -08:00 |
|
forrest-orr
|
8e07838ffb
|
Added filter case for metadata
|
2020-02-27 07:16:42 -08:00 |
|
forrest-orr
|
5a09e250ee
|
Suspicion output matching original
|
2020-02-26 12:11:52 -08:00 |
|
forrest-orr
|
20caf3ed02
|
MemoryBlock to SBlock and started Suspicions class
|
2020-02-24 14:47:02 -08:00 |
|
forrest-orr
|
d107dda18d
|
Added catalog signing check
|
2020-02-24 06:06:55 -08:00 |
|
forrest-orr
|
157b14f054
|
Added memdump from alloc base - still has bugs
|
2020-02-20 18:34:01 -08:00 |
|
forrest-orr
|
84a25c3060
|
Finalized memory dump functionality
|
2020-02-19 14:23:03 -08:00 |
|
forrest-orr
|
7d07dd66f9
|
Created memory dump class
|
2020-02-19 11:04:36 -05:00 |
|
forrest-orr
|
56be1bea02
|
Consolidated AddressSpace/Process classes and added dump option
|
2020-02-18 09:32:56 -08:00 |
|
forrest-orr
|
722d004d30
|
Added correlation between threads and processes/sblocks
|
2020-02-16 09:45:07 -08:00 |
|
forrest-orr
|
24060f9cb0
|
Improved output
|
2020-02-13 13:11:32 -08:00 |
|
forrest-orr
|
6e0d8aa2e8
|
Fixed minor bugs and added test 32/64-bit .NET EXEs
|
2020-02-13 11:41:11 -08:00 |
|
forrest-orr
|
9a69ae942c
|
Aligned output and converted MappedFile to a derived FileBase
|
2020-02-12 14:12:13 -08:00 |
|
forrest-orr
|
e81e4c9e1b
|
Added Wow64 Moneta32 exit case + mismatching section/permission suspicion
|
2020-02-12 10:02:28 -08:00 |
|
forrest-orr
|
d59d91420b
|
Debug build, Wow64 bug fix, and 32/64-bit builds
|
2020-02-09 08:54:19 -08:00 |
|
forrest-orr
|
0971ded3f4
|
Added interface/verbosity class
|
2020-02-08 16:58:33 -08:00 |
|