admin/forrest-orr-moneta
1
0
Fork 0
mirror of https://github.com/forrest-orr/moneta synced 2026-06-08 14:14:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 5b65395e57 Merge pull request #4 from gabriellandau/use-shared-original master forrest-orr 2024-03-16 18:58:19 -04:00
  • aa659951cc Use MEMORY_WORKING_SET_EX_INFORMATION.SharedOriginal to detect CoW regions on 1709+ Gabriel Landau 2024-02-21 14:31:38 -05:00
  • a142a12ca6 Initial commit moneta-v1.1 forrest-orr 2022-02-12 22:16:05 -05:00
  • 4aad531dc7 Updated Platform Toolset from v142 to v143 forrest-orr 2022-01-20 04:46:33 -08:00
  • 52e8fbc0c9 Minor bug fixes - no subregions overlapping with PE section and device name translation forrest-orr 2020-10-06 16:45:53 -04:00
  • f0e40a2ca2 Update Moneta.vcxproj forrest-orr 2020-10-06 14:34:32 -04:00
  • 6dade78960 PeFile class improvements call-by-reference forrest-orr 2020-09-13 13:14:30 -04:00
  • ebbd190caa Updated PeFile class to use smart pointers and fixed debug build path settings forrest-orr 2020-08-18 11:45:59 -04:00
  • 654344c0de Create LICENSE forrest-orr 2020-07-27 14:20:28 -04:00
  • 9407c5f829 Update FileIo.cpp forrest-orr 2020-07-25 13:27:26 -04:00
  • 4bbf191fba Update Console.cpp forrest-orr 2020-07-25 13:25:20 -04:00
  • 9795892294 Update blog post link in banners forrest-orr 2020-07-25 13:23:18 -04:00
  • c5fbe847e8 Leverage unique_ptr bool operator forrest-orr 2020-07-25 13:17:54 -04:00
  • 36b7406037 Fixed missing Usage.txt bug 1.0 forrest-orr 2020-07-17 05:48:31 -07:00
  • d8ff143059 Update README.txt forrest-orr 2020-07-07 11:18:26 -04:00
  • c6b8fead63 Switched to virtual destructors forrest-orr 2020-07-06 11:52:02 -04:00
  • d7a41c1973 Finished smart pointer upgrade forrest-orr 2020-07-06 10:50:44 -04:00
  • c9881707b7 Unique ptr updates forrest-orr 2020-07-06 09:44:28 -04:00
  • 7901f803fa Unique ptr updates - part 1 forrest-orr 2020-07-05 18:48:07 -07:00
  • 7ec6fee70f Updated readme/usage forrest-orr 2020-07-05 12:49:15 -07:00
  • 3b82749380 Minor name fix/cleanup Forrest 2020-06-23 13:23:19 -07:00
  • 9f2a279376 Minor variable/function rename Forrest 2020-06-23 13:20:53 -07:00
  • 87110d6787 Resources isolated Polish Forrest 2020-06-19 15:11:04 -07:00
  • b474392211 Create Moneta.res Forrest 2020-06-19 14:54:00 -07:00
  • 65281aa248 Optimizing exe size Forrest 2020-06-19 14:53:44 -07:00
  • 18b9bfe50f Moved source files/headers Forrest 2020-06-19 14:36:49 -07:00
  • 9ae933db69 Finished processes Forrest 2020-06-19 14:05:24 -07:00
  • 15fc987ad7 Consolidated enumeration/output code into classes Forrest 2020-06-19 13:24:35 -07:00
  • 6c9957887b Up to Process.cpp Forrest 2020-06-18 14:06:28 -07:00
  • 6b3eae6d80 IOC Forrest 2020-06-18 13:54:21 -07:00
  • 0db15c18ed Initial Forrest 2020-06-18 17:22:02 -07:00
  • ba99ebf990 Consolidated IOC map code Forrest 2020-06-17 12:43:54 -07:00
  • e308a18844 Update Console.cpp Forrest 2020-06-13 22:17:56 -07:00
  • 9ca9dc5ecf Switched filters to use flags Forrest 2020-06-13 22:16:24 -07:00
  • be8e3b9f02 Working set optimization and casting correctness Forrest 2020-06-12 07:43:56 -07:00
  • c5170155b8 Update Subregions.cpp Forrest 2020-06-12 07:32:15 -07:00
  • 7518e47bcd Update Regions.cpp Forrest 2020-06-12 07:26:11 -07:00
  • d8e8634931 Fixed working set mem leak Forrest 2020-06-12 07:15:58 -07:00
  • ecee546d34 Update and rename README.md to README.txt forrest-orr 2020-06-11 19:36:11 -04:00
  • d89c23f43b Update Browse.VC.db-shm Forrest 2020-06-11 14:43:22 -07:00
  • aa185d60ea Wow64 user32.dll filter Forrest 2020-06-10 09:31:48 -07:00
  • 8ae7c8a691 Wow64 permission filter Forrest 2020-06-10 09:11:49 -07:00
  • a4ab778e8f Silent mode added Forrest 2020-06-09 17:48:25 -07:00
  • d6a7607ecc Finished IOC statistics Forrest 2020-06-09 13:18:37 -07:00
  • 185a8d82bc IOC statistics dev Forrest 2020-06-09 12:44:25 -07:00
  • 726d0f6e51 Adding IOC suspicion statistics Forrest 2020-06-09 12:18:31 -07:00
  • f95193cba1 IOC total fix Forrest 2020-06-09 11:39:20 -07:00
  • 55376af4f6 Optional banner suppress and IOC count added Forrest 2020-06-09 11:31:21 -07:00
  • e92cd74c6e Moved usage to resource Forrest 2020-06-09 07:57:33 -07:00
  • cc6c4da418 Phantom verbose bug and statistics re-factor Forrest 2020-06-08 16:40:33 -07:00
  • 634bf8a0e3 Fixed process name query bug for non-image PEB Forrest 2020-06-08 13:12:06 -07:00
  • a84f3da19d PEB image base suspicion bug fix Forrest 2020-06-08 13:06:07 -07:00
  • b78ae3f53c Update Suspicions.cpp Forrest 2020-06-08 12:37:21 -07:00
  • ffb978bec5 Added PEB image base attribute Forrest 2020-06-08 12:33:26 -07:00
  • 055f38dac8 Removed unsigned module suspicion from phantoms Forrest 2020-06-07 07:30:07 -07:00
  • 4fe2b61abb .NET DLL update Forrest 2020-06-07 07:24:38 -07:00
  • 6b25cf674e Fixed TxF phantom bug Forrest 2020-06-07 07:24:20 -07:00
  • 22b5931072 Added new suspicion types Forrest 2020-06-05 09:04:53 -07:00
  • 6ca7cee33c Re-sized icon Forrest 2020-06-04 06:57:04 -07:00
  • ae8ed21818 Update Process.cpp Forrest 2020-06-03 17:07:37 -07:00
  • d324df63ee DotNetExe compile and CLR query bug fix Forrest 2020-06-03 17:04:40 -07:00
  • 181fc43641 Added .NET version query Forrest 2020-06-03 16:55:55 -07:00
  • 83c27f7145 CLR version output Forrest 2020-06-03 16:48:24 -07:00
  • f5c88c6dba Update Moneta.ico Forrest 2020-06-03 16:40:17 -07:00
  • 662c4f5888 Minor filter bug fix and .NET 4.8 for Wow64 DotNetTest forrest-orr 2020-06-03 12:32:00 -04:00
  • 17d19e8b44 Removed traces of original .NET scanner forrest-orr 2020-06-03 11:57:05 -04:00
  • 4d46f92f5f CLR filter working/tested DotNetNative forrest-orr 2020-06-03 11:38:36 -04:00
  • b86090ae31 Scan working forrest-orr 2020-06-02 18:17:30 -04:00
  • 0371f01cfe Began recursive ref scanner forrest-orr 2020-06-02 16:12:28 -04:00
  • 26d98bc276 Full ref scan forrest-orr 2020-06-02 14:07:23 -04:00
  • a73695a0cc Merge branch 'DotNetNative' of https://github.com/forrest-orr/moneta into DotNetNative forrest-orr 2020-06-02 13:02:36 -04:00
  • 1532991adc Debug prep for legacy vs SOS forrest-orr 2020-06-02 13:02:30 -04:00
  • 231a057ba6 Merge branch 'DotNetNative' of https://github.com/forrest-orr/moneta into DotNetNative Forrest 2020-06-02 08:11:43 -07:00
  • acf5e25fdd Update README.md Forrest 2020-06-02 08:11:34 -07:00
  • 6a58635896 IXClrDataProcess added and EnumMemoryRegions removed forrest-orr 2020-06-02 09:15:50 -04:00
  • 44304df137 Added xclrdata header forrest-orr 2020-06-02 08:54:05 -04:00
  • 2bf547d60c Debug forrest-orr 2020-06-01 16:57:06 -04:00
  • 959d4f8f6d Added clr.dll .data section scans forrest-orr 2020-06-01 13:11:44 -04:00
  • 7abbf3e798 Added region size to Moneta ref scan forrest-orr 2020-06-01 09:41:16 -04:00
  • d744ba9d27 Memory scan fixes forrest-orr 2020-06-01 09:29:21 -04:00
  • a12410540a Closing in on mystery Forrest 2020-05-30 19:56:30 -07:00
  • 540da677d3 Added external command for debug Forrest 2020-05-29 13:07:47 -07:00
  • 6f2c608273 Added debug check for private +x in native Forrest 2020-05-29 13:03:03 -07:00
  • 0735082a74 Update Process.cpp Forrest 2020-05-28 13:40:57 -07:00
  • f5b9e3f929 Overlap address detection for .NET Forrest 2020-05-28 13:34:16 -07:00
  • 4143eaee58 Update DotNetNative.cpp Forrest 2020-05-28 10:24:24 -07:00
  • 04fa69155e GetThreadContext working Forrest 2020-05-28 08:57:19 -07:00
  • 985532e984 Implementing GetThreadContext Forrest 2020-05-28 08:35:32 -07:00
  • 7595c8585e It works... memory is being enumerated but GetThreadContext must be implemented Forrest 2020-05-28 08:01:47 -07:00
  • 7ff80776e0 Initial commit Forrest 2020-05-28 07:46:46 -07:00
  • 9bdb88679a Added filter logic for unsigned modules, clr rwx heap, metadata modules forrest-orr 2020-05-11 16:08:04 -07:00
  • e9b2437dcb Added ClrMd command execution for PRV RWX forrest-orr 2020-05-09 20:55:50 -07:00
  • 0be66c0f14 Cleanup forrest-orr 2020-04-23 12:38:15 -07:00
  • e9bafaefb1 Delete Moneta64.exe forrest-orr 2020-04-23 12:37:37 -07:00
  • cf2dc6ba90 Added .NET test DLLs and architecture output to Moneta forrest-orr 2020-04-23 12:36:26 -07:00
  • 798e0a4534 Update Process.cpp forrest-orr 2020-04-20 18:00:18 -07:00
  • 32a0cc2791 References working data-reference-scan forrest-orr 2020-04-19 15:11:43 -07:00
  • 7387c865ac Update Process.cpp forrest-orr 2020-04-19 14:42:23 -07:00
  • af9731e5df Update Process.cpp forrest-orr 2020-04-18 17:21:42 -07:00
  • baa2352463 Update Process.cpp forrest-orr 2020-04-18 14:35:43 -07:00