forrest-orr
|
65fbd20db1
|
Fixed section name align bug
|
2020-02-24 06:19:14 -08:00 |
|
forrest-orr
|
d107dda18d
|
Added catalog signing check
|
2020-02-24 06:06:55 -08:00 |
|
forrest-orr
|
105be72c9a
|
Fixed signing bug and started writing new output layout
|
2020-02-23 19:04:30 -08:00 |
|
forrest-orr
|
989ffed787
|
Fixed non-executable section enum
|
2020-02-23 10:30:22 -08:00 |
|
forrest-orr
|
b00e65a27f
|
Added non-executable image detection
|
2020-02-23 09:33:55 -08:00 |
|
forrest-orr
|
61f1847462
|
Added signing check and colored output function
|
2020-02-22 19:22:25 -08:00 |
|
forrest-orr
|
a94c54f294
|
Added PEB module name mismatch case
|
2020-02-22 11:33:17 -08:00 |
|
forrest-orr
|
c076ce795a
|
Added PEB link mismatch case
|
2020-02-21 19:49:45 -08:00 |
|
forrest-orr
|
6f7de09e83
|
Added PEB module unlink detection
|
2020-02-21 19:24:32 -08:00 |
|
forrest-orr
|
5435e8368a
|
Fixed ansi/unicode section name bug
|
2020-02-21 14:08:51 -08:00 |
|
forrest-orr
|
f3776c42ac
|
Enhanced memdmp output
|
2020-02-21 13:15:11 -08:00 |
|
forrest-orr
|
d9d9bc412a
|
Fixed memdmp full region bug
|
2020-02-21 09:35:27 -08:00 |
|
forrest-orr
|
157b14f054
|
Added memdump from alloc base - still has bugs
|
2020-02-20 18:34:01 -08:00 |
|
forrest-orr
|
84a25c3060
|
Finalized memory dump functionality
|
2020-02-19 14:23:03 -08:00 |
|
forrest-orr
|
7d07dd66f9
|
Created memory dump class
|
2020-02-19 11:04:36 -05:00 |
|
forrest-orr
|
56be1bea02
|
Consolidated AddressSpace/Process classes and added dump option
|
2020-02-18 09:32:56 -08:00 |
|
forrest-orr
|
722d004d30
|
Added correlation between threads and processes/sblocks
|
2020-02-16 09:45:07 -08:00 |
|