forrest-orr
|
d744ba9d27
|
Memory scan fixes
|
2020-06-01 09:29:21 -04:00 |
|
Forrest
|
540da677d3
|
Added external command for debug
|
2020-05-29 13:07:47 -07:00 |
|
Forrest
|
0735082a74
|
Update Process.cpp
|
2020-05-28 13:40:57 -07:00 |
|
forrest-orr
|
9bdb88679a
|
Added filter logic for unsigned modules, clr rwx heap, metadata modules
|
2020-05-11 16:08:04 -07:00 |
|
forrest-orr
|
e9b2437dcb
|
Added ClrMd command execution for PRV RWX
|
2020-05-09 20:55:50 -07:00 |
|
forrest-orr
|
cf2dc6ba90
|
Added .NET test DLLs and architecture output to Moneta
|
2020-04-23 12:36:26 -07:00 |
|
forrest-orr
|
798e0a4534
|
Update Process.cpp
|
2020-04-20 18:00:18 -07:00 |
|
forrest-orr
|
32a0cc2791
|
References working
|
2020-04-19 15:11:43 -07:00 |
|
forrest-orr
|
7387c865ac
|
Update Process.cpp
|
2020-04-19 14:42:23 -07:00 |
|
forrest-orr
|
af9731e5df
|
Update Process.cpp
|
2020-04-18 17:21:42 -07:00 |
|
forrest-orr
|
baa2352463
|
Update Process.cpp
|
2020-04-18 14:35:43 -07:00 |
|
forrest-orr
|
a6631314f1
|
Added base memory dump code for references
|
2020-04-18 13:11:20 -07:00 |
|
forrest-orr
|
a503df97d6
|
Moved user input to scanner context class
|
2020-04-17 18:28:00 -07:00 |
|
forrest-orr
|
7aab36160f
|
Added reference search function prototype
|
2020-04-16 18:38:28 -07:00 |
|
forrest-orr
|
1a004c8865
|
Update Process.cpp
|
2020-04-15 18:51:48 -07:00 |
|
forrest-orr
|
a6ad75bec6
|
PE type added to output
|
2020-04-13 17:48:09 -07:00 |
|
forrest-orr
|
a5f34ba2e7
|
Added PE methods for .NET, EXE, and DLL
|
2020-04-13 11:43:27 -07:00 |
|
forrest-orr
|
06739eaf87
|
Finished TEB/PEB 32/64 association
|
2020-04-08 10:07:14 -07:00 |
|
forrest-orr
|
bcaae8d60c
|
TEB query
|
2020-04-08 06:14:08 -07:00 |
|
forrest-orr
|
5b44cccfc0
|
Heap search via PEB for x86
|
2020-04-08 05:52:35 -07:00 |
|
forrest-orr
|
95df8a224b
|
Heaps queried from PEB x64
|
2020-04-08 05:27:39 -07:00 |
|
forrest-orr
|
47bfc553d4
|
Updating PEB code
|
2020-04-07 15:03:53 -07:00 |
|
forrest-orr
|
8860ed79f9
|
Adding PEB query for 32/64
|
2020-04-07 14:36:17 -07:00 |
|
forrest-orr
|
af112de137
|
Typedef re-factor and section size bug fix
|
2020-04-07 13:02:50 -07:00 |
|
forrest-orr
|
c64a338e55
|
Heap debugging
|
2020-04-06 16:22:16 -07:00 |
|
forrest-orr
|
c1fb911bcd
|
Added heap filtering and attribute output
|
2020-04-06 14:51:10 -07:00 |
|
forrest-orr
|
8c6edf21d8
|
Filtered private +rwx from clr.dll due to heaps
|
2020-04-05 14:17:49 -07:00 |
|
forrest-orr
|
61fb86cba7
|
Added heap list to process class
|
2020-04-05 13:59:59 -07:00 |
|
forrest-orr
|
eb09042031
|
Finished re-factor and added signing type distinction
|
2020-03-29 16:42:44 -07:00 |
|
forrest-orr
|
39e1a84a47
|
Typecast re-factor up to PeFile.cpp
|
2020-03-28 18:49:02 -07:00 |
|
forrest-orr
|
2c3df8bc56
|
Const vars/methods and processes namespace
|
2020-03-27 17:20:30 -07:00 |
|
forrest-orr
|
0c7b83f976
|
More cleanup
|
2020-03-26 16:34:17 -07:00 |
|
forrest-orr
|
50845f5614
|
Initial source polish
|
2020-03-24 16:23:07 -07:00 |
|
forrest-orr
|
9d1c5ee90f
|
Added new code banner
|
2020-03-22 17:03:23 -07:00 |
|
forrest-orr
|
10fa895243
|
Cleaned up headers
|
2020-03-22 16:20:32 -07:00 |
|
forrest-orr
|
d8f77b12b6
|
Fixed working set bug
|
2020-03-21 20:12:40 -07:00 |
|
forrest-orr
|
a833968b5c
|
Added banner and console color enum
|
2020-03-21 18:56:24 -07:00 |
|
forrest-orr
|
76c8aa237a
|
Added colors to output
|
2020-03-20 15:16:03 -07:00 |
|
forrest-orr
|
7759e96463
|
Consolidated interface verbosity
|
2020-03-20 11:13:56 -07:00 |
|
forrest-orr
|
224836077d
|
Consolidated classes/namespaces and headers
|
2020-03-18 14:37:25 -07:00 |
|
forrest-orr
|
a29df6563a
|
Re-structuring classes into namespaces
|
2020-03-18 11:28:52 -07:00 |
|
forrest-orr
|
d00a8e5f9b
|
Get/set methods and fixed private query bug
|
2020-03-17 16:07:39 -07:00 |
|
forrest-orr
|
7320bb7145
|
Page noaccess workingset bug
|
2020-03-14 16:43:55 -07:00 |
|
forrest-orr
|
8ec027c995
|
Added scan time duration
|
2020-03-14 16:17:54 -07:00 |
|
forrest-orr
|
e5937266e3
|
PE header performance optimization
|
2020-03-14 12:06:40 -07:00 |
|
forrest-orr
|
5d2e1676f6
|
Adding PE header optimization
|
2020-03-13 17:52:11 -07:00 |
|
forrest-orr
|
6cb901dcde
|
Fixed double-enum on suspicions with full entity/non-full types
|
2020-03-11 19:50:20 -07:00 |
|
forrest-orr
|
b02c65f9e4
|
Re-designed statistics output
|
2020-03-10 09:33:11 -07:00 |
|
forrest-orr
|
a48492b9d0
|
Fixed working set query performance issue
|
2020-03-10 07:55:14 -07:00 |
|
forrest-orr
|
befe3849a2
|
Changed suspicion vector to list
|
2020-03-08 19:06:26 -07:00 |
|