97 Commits

Author	SHA1	Message	Date
forrest-orr	32a0cc2791	References working	2020-04-19 15:11:43 -07:00
forrest-orr	7387c865ac	Update Process.cpp	2020-04-19 14:42:23 -07:00
forrest-orr	af9731e5df	Update Process.cpp	2020-04-18 17:21:42 -07:00
forrest-orr	baa2352463	Update Process.cpp	2020-04-18 14:35:43 -07:00
forrest-orr	a6631314f1	Added base memory dump code for references	2020-04-18 13:11:20 -07:00
forrest-orr	a503df97d6	Moved user input to scanner context class	2020-04-17 18:28:00 -07:00
forrest-orr	7aab36160f	Added reference search function prototype	2020-04-16 18:38:28 -07:00
forrest-orr	1a004c8865	Update Process.cpp	2020-04-15 18:51:48 -07:00
forrest-orr	a6ad75bec6	PE type added to output	2020-04-13 17:48:09 -07:00
forrest-orr	a5f34ba2e7	Added PE methods for .NET, EXE, and DLL	2020-04-13 11:43:27 -07:00
forrest-orr	06739eaf87	Finished TEB/PEB 32/64 association	2020-04-08 10:07:14 -07:00
forrest-orr	bcaae8d60c	TEB query	2020-04-08 06:14:08 -07:00
forrest-orr	5b44cccfc0	Heap search via PEB for x86	2020-04-08 05:52:35 -07:00
forrest-orr	95df8a224b	Heaps queried from PEB x64	2020-04-08 05:27:39 -07:00
forrest-orr	47bfc553d4	Updating PEB code	2020-04-07 15:03:53 -07:00
forrest-orr	8860ed79f9	Adding PEB query for 32/64	2020-04-07 14:36:17 -07:00
forrest-orr	af112de137	Typedef re-factor and section size bug fix	2020-04-07 13:02:50 -07:00
forrest-orr	c64a338e55	Heap debugging	2020-04-06 16:22:16 -07:00
forrest-orr	c1fb911bcd	Added heap filtering and attribute output	2020-04-06 14:51:10 -07:00
forrest-orr	8c6edf21d8	Filtered private +rwx from clr.dll due to heaps	2020-04-05 14:17:49 -07:00
forrest-orr	61fb86cba7	Added heap list to process class	2020-04-05 13:59:59 -07:00
forrest-orr	eb09042031	Finished re-factor and added signing type distinction	2020-03-29 16:42:44 -07:00
forrest-orr	39e1a84a47	Typecast re-factor up to PeFile.cpp	2020-03-28 18:49:02 -07:00
forrest-orr	2c3df8bc56	Const vars/methods and processes namespace	2020-03-27 17:20:30 -07:00
forrest-orr	0c7b83f976	More cleanup	2020-03-26 16:34:17 -07:00
forrest-orr	50845f5614	Initial source polish	2020-03-24 16:23:07 -07:00
forrest-orr	9d1c5ee90f	Added new code banner	2020-03-22 17:03:23 -07:00
forrest-orr	10fa895243	Cleaned up headers	2020-03-22 16:20:32 -07:00
forrest-orr	d8f77b12b6	Fixed working set bug	2020-03-21 20:12:40 -07:00
forrest-orr	a833968b5c	Added banner and console color enum	2020-03-21 18:56:24 -07:00
forrest-orr	76c8aa237a	Added colors to output	2020-03-20 15:16:03 -07:00
forrest-orr	7759e96463	Consolidated interface verbosity	2020-03-20 11:13:56 -07:00
forrest-orr	224836077d	Consolidated classes/namespaces and headers	2020-03-18 14:37:25 -07:00
forrest-orr	a29df6563a	Re-structuring classes into namespaces	2020-03-18 11:28:52 -07:00
forrest-orr	d00a8e5f9b	Get/set methods and fixed private query bug	2020-03-17 16:07:39 -07:00
forrest-orr	7320bb7145	Page noaccess workingset bug	2020-03-14 16:43:55 -07:00
forrest-orr	8ec027c995	Added scan time duration	2020-03-14 16:17:54 -07:00
forrest-orr	e5937266e3	PE header performance optimization	2020-03-14 12:06:40 -07:00
forrest-orr	5d2e1676f6	Adding PE header optimization	2020-03-13 17:52:11 -07:00
forrest-orr	6cb901dcde	Fixed double-enum on suspicions with full entity/non-full types	2020-03-11 19:50:20 -07:00
forrest-orr	b02c65f9e4	Re-designed statistics output	2020-03-10 09:33:11 -07:00
forrest-orr	a48492b9d0	Fixed working set query performance issue	2020-03-10 07:55:14 -07:00
forrest-orr	befe3849a2	Changed suspicion vector to list	2020-03-08 19:06:26 -07:00
forrest-orr	4bc5d833fc	Added statistics support	2020-03-08 19:03:21 -07:00
forrest-orr	565c418070	Started adding statistics option	2020-03-08 17:08:38 -07:00
forrest-orr	dc13e77367	Update Process.cpp	2020-03-08 15:26:07 -07:00
forrest-orr	cc6b156542	Abandoned region info	2020-03-08 15:22:26 -07:00
forrest-orr	a6e8b77314	Added region info to ablock entity	2020-03-08 15:07:35 -07:00
forrest-orr	7d382a238b	Added private memory to sblock	2020-03-08 14:45:58 -07:00
forrest-orr	381a821d3f	Added verbose signing check detail	2020-03-08 08:25:05 -07:00