forrest-orr
|
0c7b83f976
|
More cleanup
|
2020-03-26 16:34:17 -07:00 |
|
forrest-orr
|
50845f5614
|
Initial source polish
|
2020-03-24 16:23:07 -07:00 |
|
forrest-orr
|
9d1c5ee90f
|
Added new code banner
|
2020-03-22 17:03:23 -07:00 |
|
forrest-orr
|
10fa895243
|
Cleaned up headers
|
2020-03-22 16:20:32 -07:00 |
|
forrest-orr
|
d8f77b12b6
|
Fixed working set bug
|
2020-03-21 20:12:40 -07:00 |
|
forrest-orr
|
a833968b5c
|
Added banner and console color enum
|
2020-03-21 18:56:24 -07:00 |
|
forrest-orr
|
76c8aa237a
|
Added colors to output
|
2020-03-20 15:16:03 -07:00 |
|
forrest-orr
|
7759e96463
|
Consolidated interface verbosity
|
2020-03-20 11:13:56 -07:00 |
|
forrest-orr
|
224836077d
|
Consolidated classes/namespaces and headers
|
2020-03-18 14:37:25 -07:00 |
|
forrest-orr
|
a29df6563a
|
Re-structuring classes into namespaces
|
2020-03-18 11:28:52 -07:00 |
|
forrest-orr
|
d00a8e5f9b
|
Get/set methods and fixed private query bug
|
2020-03-17 16:07:39 -07:00 |
|
forrest-orr
|
7320bb7145
|
Page noaccess workingset bug
|
2020-03-14 16:43:55 -07:00 |
|
forrest-orr
|
8ec027c995
|
Added scan time duration
|
2020-03-14 16:17:54 -07:00 |
|
forrest-orr
|
e5937266e3
|
PE header performance optimization
|
2020-03-14 12:06:40 -07:00 |
|
forrest-orr
|
5d2e1676f6
|
Adding PE header optimization
|
2020-03-13 17:52:11 -07:00 |
|
forrest-orr
|
6cb901dcde
|
Fixed double-enum on suspicions with full entity/non-full types
|
2020-03-11 19:50:20 -07:00 |
|
forrest-orr
|
b02c65f9e4
|
Re-designed statistics output
|
2020-03-10 09:33:11 -07:00 |
|
forrest-orr
|
a48492b9d0
|
Fixed working set query performance issue
|
2020-03-10 07:55:14 -07:00 |
|
forrest-orr
|
befe3849a2
|
Changed suspicion vector to list
|
2020-03-08 19:06:26 -07:00 |
|
forrest-orr
|
4bc5d833fc
|
Added statistics support
|
2020-03-08 19:03:21 -07:00 |
|
forrest-orr
|
565c418070
|
Started adding statistics option
|
2020-03-08 17:08:38 -07:00 |
|
forrest-orr
|
dc13e77367
|
Update Process.cpp
|
2020-03-08 15:26:07 -07:00 |
|
forrest-orr
|
cc6b156542
|
Abandoned region info
|
2020-03-08 15:22:26 -07:00 |
|
forrest-orr
|
a6e8b77314
|
Added region info to ablock entity
|
2020-03-08 15:07:35 -07:00 |
|
forrest-orr
|
7d382a238b
|
Added private memory to sblock
|
2020-03-08 14:45:58 -07:00 |
|
forrest-orr
|
381a821d3f
|
Added verbose signing check detail
|
2020-03-08 08:25:05 -07:00 |
|
forrest-orr
|
b2df21ce1d
|
Added additional detail fields for executables
|
2020-03-08 08:55:18 -07:00 |
|
forrest-orr
|
73cb3ecde5
|
Added entry point to PEB module
|
2020-03-07 18:12:57 -08:00 |
|
forrest-orr
|
16abfe8906
|
Detail verbosity for entities
|
2020-03-07 17:02:51 -08:00 |
|
forrest-orr
|
55710b0568
|
Update Process.cpp
|
2020-03-06 17:14:39 -08:00 |
|
forrest-orr
|
579d79abd5
|
Block memory selection type added/tested
|
2020-03-06 16:56:44 -08:00 |
|
forrest-orr
|
b3c1dfc221
|
Designing detailed verbose output
|
2020-03-06 16:22:27 -08:00 |
|
forrest-orr
|
84db89c2f3
|
Fixed minor formatting issues
|
2020-03-05 15:53:09 -08:00 |
|
forrest-orr
|
c292481995
|
Consolidated memdmp code and fixed from-base dump bug
|
2020-03-05 13:10:32 -08:00 |
|
forrest-orr
|
2d8dbdf01d
|
Fixed section bug and consolidated suspicion enum to new func
|
2020-03-04 18:39:01 -08:00 |
|
forrest-orr
|
46e2289a8c
|
Fixed a series of bugs - section overlap bug remains
|
2020-03-04 17:18:26 -05:00 |
|
forrest-orr
|
abc51f76a4
|
Begun consolidating enumeration of PE and other entity types
|
2020-03-03 18:08:28 -08:00 |
|
forrest-orr
|
2c207c6aa3
|
Consolidated enum logic for PE entity
|
2020-03-03 16:02:33 -08:00 |
|
forrest-orr
|
4c660a0a52
|
Update Process.cpp
|
2020-03-03 05:49:54 -08:00 |
|
forrest-orr
|
d1dd9a1879
|
Update Process.cpp
|
2020-03-02 18:27:20 -08:00 |
|
forrest-orr
|
0bcf1729e7
|
Finished new args
|
2020-03-02 17:36:27 -08:00 |
|
forrest-orr
|
7b377233d9
|
Fixed suspicion dumping
|
2020-02-29 10:46:07 -08:00 |
|
forrest-orr
|
7562629178
|
Update Process.cpp
|
2020-02-28 19:20:08 -08:00 |
|
forrest-orr
|
94f69571c3
|
Fixed suspicions map gen bug
|
2020-02-28 19:14:23 -08:00 |
|
forrest-orr
|
0f6a341998
|
Fixing filter bugs
|
2020-02-28 18:21:18 -08:00 |
|
forrest-orr
|
088e6aecd2
|
Update Process.cpp
|
2020-02-28 08:16:41 -08:00 |
|
forrest-orr
|
570d2394e4
|
Begun adding double maps for suspicions
|
2020-02-27 19:28:41 -08:00 |
|
forrest-orr
|
80a021dc22
|
Changed metadata filter criteria to sign/ext only
|
2020-02-27 07:25:06 -08:00 |
|
forrest-orr
|
8e07838ffb
|
Added filter case for metadata
|
2020-02-27 07:16:42 -08:00 |
|
forrest-orr
|
e03fb415f3
|
Filter cases working
|
2020-02-26 19:51:03 -08:00 |
|