admin/forrest-orr-moneta
1
0
Fork 0
mirror of https://github.com/forrest-orr/moneta synced 2026-06-08 14:14:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
85 Commits 10 Branches 1 Tag
4c660a0a52aa48830ca62caebd2387ff9a1eb17e
Commit Graph

35 Commits

Author SHA1 Message Date
forrest-orr 4c660a0a52 Update Process.cpp 2020-03-03 05:49:54 -08:00
forrest-orr d1dd9a1879 Update Process.cpp 2020-03-02 18:27:20 -08:00
forrest-orr 0bcf1729e7 Finished new args 2020-03-02 17:36:27 -08:00
forrest-orr 7b377233d9 Fixed suspicion dumping 2020-02-29 10:46:07 -08:00
forrest-orr 7562629178 Update Process.cpp 2020-02-28 19:20:08 -08:00
forrest-orr 94f69571c3 Fixed suspicions map gen bug 2020-02-28 19:14:23 -08:00
forrest-orr 0f6a341998 Fixing filter bugs 2020-02-28 18:21:18 -08:00
forrest-orr 088e6aecd2 Update Process.cpp 2020-02-28 08:16:41 -08:00
forrest-orr 570d2394e4 Begun adding double maps for suspicions 2020-02-27 19:28:41 -08:00
forrest-orr 80a021dc22 Changed metadata filter criteria to sign/ext only 2020-02-27 07:25:06 -08:00
forrest-orr 8e07838ffb Added filter case for metadata 2020-02-27 07:16:42 -08:00
forrest-orr e03fb415f3 Filter cases working 2020-02-26 19:51:03 -08:00
forrest-orr 5a09e250ee Suspicion output matching original 2020-02-26 12:11:52 -08:00
forrest-orr e7d8231873 Suspicion enumeration dev 2020-02-26 10:27:25 -08:00
forrest-orr 807c431de8 Finished generating suspicions class list 2020-02-25 19:10:06 -08:00
forrest-orr 428a4b99e4 Developing suspicion base code 2020-02-25 15:10:46 -08:00
forrest-orr afa9e813af Initial commit 2020-02-24 17:32:24 -08:00
forrest-orr 20caf3ed02 MemoryBlock to SBlock and started Suspicions class 2020-02-24 14:47:02 -08:00
forrest-orr 65fbd20db1 Fixed section name align bug 2020-02-24 06:19:14 -08:00
forrest-orr d107dda18d Added catalog signing check 2020-02-24 06:06:55 -08:00
forrest-orr 105be72c9a Fixed signing bug and started writing new output layout 2020-02-23 19:04:30 -08:00
forrest-orr 989ffed787 Fixed non-executable section enum 2020-02-23 10:30:22 -08:00
forrest-orr b00e65a27f Added non-executable image detection 2020-02-23 09:33:55 -08:00
forrest-orr 61f1847462 Added signing check and colored output function 2020-02-22 19:22:25 -08:00
forrest-orr a94c54f294 Added PEB module name mismatch case 2020-02-22 11:33:17 -08:00
forrest-orr c076ce795a Added PEB link mismatch case 2020-02-21 19:49:45 -08:00
forrest-orr 6f7de09e83 Added PEB module unlink detection 2020-02-21 19:24:32 -08:00
forrest-orr 5435e8368a Fixed ansi/unicode section name bug 2020-02-21 14:08:51 -08:00
forrest-orr f3776c42ac Enhanced memdmp output 2020-02-21 13:15:11 -08:00
forrest-orr d9d9bc412a Fixed memdmp full region bug 2020-02-21 09:35:27 -08:00
forrest-orr 157b14f054 Added memdump from alloc base - still has bugs 2020-02-20 18:34:01 -08:00
forrest-orr 84a25c3060 Finalized memory dump functionality 2020-02-19 14:23:03 -08:00
forrest-orr 7d07dd66f9 Created memory dump class 2020-02-19 11:04:36 -05:00
forrest-orr 56be1bea02 Consolidated AddressSpace/Process classes and added dump option 2020-02-18 09:32:56 -08:00
forrest-orr 722d004d30 Added correlation between threads and processes/sblocks 2020-02-16 09:45:07 -08:00