Commit Graph

50 Commits

Author SHA1 Message Date
forrest-orr a6631314f1 Added base memory dump code for references 2020-04-18 13:11:20 -07:00
forrest-orr a503df97d6 Moved user input to scanner context class 2020-04-17 18:28:00 -07:00
forrest-orr 52009a1b9d Added reference selection type 2020-04-16 18:04:13 -07:00
forrest-orr 06739eaf87 Finished TEB/PEB 32/64 association 2020-04-08 10:07:14 -07:00
forrest-orr 8860ed79f9 Adding PEB query for 32/64 2020-04-07 14:36:17 -07:00
forrest-orr af112de137 Typedef re-factor and section size bug fix 2020-04-07 13:02:50 -07:00
forrest-orr c64a338e55 Heap debugging 2020-04-06 16:22:16 -07:00
forrest-orr c1fb911bcd Added heap filtering and attribute output 2020-04-06 14:51:10 -07:00
forrest-orr eb09042031 Finished re-factor and added signing type distinction 2020-03-29 16:42:44 -07:00
forrest-orr 1dc8cad371 Finished typecast re-factor 2020-03-29 10:18:50 -07:00
forrest-orr 39e1a84a47 Typecast re-factor up to PeFile.cpp 2020-03-28 18:49:02 -07:00
forrest-orr 2c3df8bc56 Const vars/methods and processes namespace 2020-03-27 17:20:30 -07:00
forrest-orr 0c7b83f976 More cleanup 2020-03-26 16:34:17 -07:00
forrest-orr 50845f5614 Initial source polish 2020-03-24 16:23:07 -07:00
forrest-orr 21233d52c4 Banner and output syntax updates 2020-03-23 20:09:05 -07:00
forrest-orr 9d1c5ee90f Added new code banner 2020-03-22 17:03:23 -07:00
forrest-orr 10fa895243 Cleaned up headers 2020-03-22 16:20:32 -07:00
forrest-orr a833968b5c Added banner and console color enum 2020-03-21 18:56:24 -07:00
forrest-orr 76c8aa237a Added colors to output 2020-03-20 15:16:03 -07:00
forrest-orr 7759e96463 Consolidated interface verbosity 2020-03-20 11:13:56 -07:00
forrest-orr 224836077d Consolidated classes/namespaces and headers 2020-03-18 14:37:25 -07:00
forrest-orr a29df6563a Re-structuring classes into namespaces 2020-03-18 11:28:52 -07:00
forrest-orr 192c952409 Update Console.cpp 2020-03-14 16:18:14 -07:00
forrest-orr 8ec027c995 Added scan time duration 2020-03-14 16:17:54 -07:00
forrest-orr e5937266e3 PE header performance optimization 2020-03-14 12:06:40 -07:00
forrest-orr 4bc5d833fc Added statistics support 2020-03-08 19:03:21 -07:00
forrest-orr 565c418070 Started adding statistics option 2020-03-08 17:08:38 -07:00
forrest-orr b2df21ce1d Added additional detail fields for executables 2020-03-08 08:55:18 -07:00
forrest-orr 579d79abd5 Block memory selection type added/tested 2020-03-06 16:56:44 -08:00
forrest-orr 46e2289a8c Fixed a series of bugs - section overlap bug remains 2020-03-04 17:18:26 -05:00
forrest-orr 0bcf1729e7 Finished new args 2020-03-02 17:36:27 -08:00
forrest-orr 0811015996 Started new interface 2020-03-02 14:40:15 -08:00
forrest-orr eadef58d9f Update Console.cpp 2020-03-02 14:06:10 -08:00
forrest-orr 7b377233d9 Fixed suspicion dumping 2020-02-29 10:46:07 -08:00
forrest-orr 0f6a341998 Fixing filter bugs 2020-02-28 18:21:18 -08:00
forrest-orr 8e07838ffb Added filter case for metadata 2020-02-27 07:16:42 -08:00
forrest-orr 5a09e250ee Suspicion output matching original 2020-02-26 12:11:52 -08:00
forrest-orr 20caf3ed02 MemoryBlock to SBlock and started Suspicions class 2020-02-24 14:47:02 -08:00
forrest-orr d107dda18d Added catalog signing check 2020-02-24 06:06:55 -08:00
forrest-orr 157b14f054 Added memdump from alloc base - still has bugs 2020-02-20 18:34:01 -08:00
forrest-orr 84a25c3060 Finalized memory dump functionality 2020-02-19 14:23:03 -08:00
forrest-orr 7d07dd66f9 Created memory dump class 2020-02-19 11:04:36 -05:00
forrest-orr 56be1bea02 Consolidated AddressSpace/Process classes and added dump option 2020-02-18 09:32:56 -08:00
forrest-orr 722d004d30 Added correlation between threads and processes/sblocks 2020-02-16 09:45:07 -08:00
forrest-orr 24060f9cb0 Improved output 2020-02-13 13:11:32 -08:00
forrest-orr 6e0d8aa2e8 Fixed minor bugs and added test 32/64-bit .NET EXEs 2020-02-13 11:41:11 -08:00
forrest-orr 9a69ae942c Aligned output and converted MappedFile to a derived FileBase 2020-02-12 14:12:13 -08:00
forrest-orr e81e4c9e1b Added Wow64 Moneta32 exit case + mismatching section/permission suspicion 2020-02-12 10:02:28 -08:00
forrest-orr d59d91420b Debug build, Wow64 bug fix, and 32/64-bit builds 2020-02-09 08:54:19 -08:00
forrest-orr 0971ded3f4 Added interface/verbosity class 2020-02-08 16:58:33 -08:00