 hasherezade
|
3cb6842ac9
|
[FEATURE] Removed used_params from the report
|
2023-11-09 09:32:16 -08:00 |
|
|
hasherezade
|
4092a56703
|
[FEATURE] Store used parameters in the report
|
2023-07-15 17:32:58 -07:00 |
|
|
hasherezade
|
c39bf3ffef
|
[FEATURE] Added different modes of obfuscated areas detection
|
2023-07-09 12:03:26 -07:00 |
|
|
hasherezade
|
07fbbd3995
|
[FEATURE] Added different modes of shellcode detection
|
2023-07-09 11:34:13 -07:00 |
|
|
hasherezade
|
9023be4ca0
|
[FEATURE] Added new arg: obfusc - to scan for obfuscated contents
|
2023-07-09 10:47:24 -07:00 |
|
|
hasherezade
|
4cfc1f74cf
|
[FEATURE] Changes in the API to improve compatibility with Golang
|
2023-01-03 10:20:07 -08:00 |
|
|
hasherezade
|
bba3f799eb
|
[REFACT] Removed pe_sieve_version.h from the includes
|
2022-11-05 08:04:51 -07:00 |
|
|
hasherezade
|
071f768174
|
[REFACT] Changes in presenting the version
|
2022-11-05 06:13:37 -07:00 |
|
|
hasherezade
|
32c3d35471
|
[FEATURE] Set product version
|
2022-11-04 16:50:06 -07:00 |
|
|
hasherezade
|
6da0e3a9e9
|
[FEATURE] Refactored version definition. Added version to resources
|
2022-11-04 07:14:42 -07:00 |
|
|
hasherezade
|
1613d026d2
|
[FEATURE] In report_to_json: do not output empty dump report, unless specifically requested
|
2022-11-03 16:20:18 -07:00 |
|
|
hasherezade
|
571672970e
|
[FEATURE] Format connected scan and dump reports as valid JSON
|
2022-11-03 14:54:44 -07:00 |
|
|
hasherezade
|
04bb5b25ad
|
[FEATURE] Added param to API: PEsieve_scan_ex allowing to fetch both scan and dump reports
|
2022-11-03 12:49:46 -07:00 |
|
|
hasherezade
|
24933841b8
|
[NOBIN] Small changes in a function comment
|
2022-08-30 18:27:14 -07:00 |
|
|
hasherezade
|
29173feb21
|
[FEATURE] Added another API function allowing to pass full JSON report to the caller (Issue #105)
|
2022-08-30 18:23:12 -07:00 |
|
|
hasherezade
|
a9e625b1f8
|
[FEATURE] Permit scanning own workingset & threads (Issue #104)
|
2022-08-30 17:25:03 -07:00 |
|
|
hasherezade
|
7c3ae824a2
|
[REFACT] Moved process details: DEP, isReflection into a new structure
|
2022-08-29 19:29:07 -07:00 |
|
|
hasherezade
|
503b57eb8c
|
[VERSION] 0.3.4
|
2022-02-10 14:15:56 -08:00 |
|
|
hasherezade
|
b76f17ad47
|
[FEATURE] Enum stack frames in a separate thread, to prevent stucking
|
2022-02-08 12:44:56 -08:00 |
|
|
hasherezade
|
d1c8179c92
|
[REFACT] Do not collect the full stack. Added one more accepted condition to scan the thread
|
2022-02-08 11:36:50 -08:00 |
|
|
hasherezade
|
d043b82068
|
[FEATURE] Create a report from the thread scan
|
2022-02-06 17:40:29 -08:00 |
|
|
hasherezade
|
b023176608
|
[WIP] Added thread scanner
|
2022-02-06 16:20:08 -08:00 |
|
|
hasherezade
|
ff246aca35
|
[REFACT] Removed a redundant constant: MAX_MODULE_BUF_LEN
|
2022-02-05 06:27:32 -08:00 |
|
|
hasherezade
|
4874ef5d45
|
[REFACT] Use PARAM_STRING structure for mignore list
|
2022-02-04 12:14:40 -08:00 |
|
|
hasherezade
|
81102b0c55
|
[REFACT] Keep ignored modules as a set of strings
|
2022-02-03 15:35:01 -08:00 |
|
|
hasherezade
|
a71147606a
|
[VERSION] 0.3.3
|
2022-01-23 13:22:03 -08:00 |
|
|
hasherezade
|
50c1e56e40
|
[VERSION] 0.3.2.9
|
2022-01-22 12:21:07 -08:00 |
|
|
hasherezade
|
a76d1319a8
|
[REFACT] In IAT Scan report: refactored formatting target name. Small cleanup
|
2022-01-22 09:33:56 -08:00 |
|
|
hasherezade
|
57757bd5c2
|
[VERSION] 0.3.2.7
|
2022-01-21 11:35:30 -08:00 |
|
|
hasherezade
|
f7677bc14b
|
[VESION] 0.3.2.6
|
2022-01-21 06:30:08 -08:00 |
|
|
hasherezade
|
6b20bf27ff
|
[VERSION] 0.3.2.5
|
2022-01-20 12:06:19 -08:00 |
|
|
hasherezade
|
566e8cbe05
|
[VERSION] 0.3.2.4
|
2022-01-18 21:07:43 +01:00 |
|
|
hasherezade
|
399b42640f
|
[REFACT] Map file from raw to virtual while loading from cache
|
2022-01-14 12:28:22 -08:00 |
|
|
hasherezade
|
ce78acc664
|
[VERSION] 0.3.2.2
|
2022-01-09 13:07:30 -08:00 |
|
|
hasherezade
|
d52635c759
|
[FEATURE] Allow to enable/disable caching by a param
|
2022-01-09 12:50:48 -08:00 |
|
|
hasherezade
|
240d607f3c
|
[VERSION] 0.3.2.1
|
2022-01-09 10:42:35 -08:00 |
|
|
hasherezade
|
9671e09000
|
[BUGFIX] Updated libpeconv: import table mistakenly treated as invalid was causing failure in dumping of some samples
|
2022-01-04 16:21:52 +01:00 |
|
|
hasherezade
|
41b7ee6c1d
|
[VERSION] 0.3.2
|
2021-12-28 09:16:50 -08:00 |
|
|
hasherezade
|
6999564e45
|
[VERSION] 0.3.1.5
|
2021-12-23 07:46:45 -08:00 |
|
|
hasherezade
|
1fd04fedd6
|
[FEATURE] Filter the collected IATs
|
2021-12-22 16:25:17 -08:00 |
|
|
hasherezade
|
822e054ad0
|
[FEATURE] Report whether the scan was performed on process reflection
|
2021-12-22 17:33:30 +01:00 |
|
|
hasherezade
|
fe11969d4d
|
[BUGFIX] In imprec auto mode: do not recover imports of .NET modules (Issue #89)
|
2021-09-10 19:21:34 +02:00 |
|
|
hasherezade
|
5981636aa1
|
[BUGFIX] Fixed invalid condition check on scanning data (Issue #93)
|
2021-09-10 13:32:49 +02:00 |
|
|
hasherezade
|
47ee21b3b5
|
[FEATURE] More precise clearing of IAT: field by field (Issue #15)
|
2021-09-09 18:11:13 +02:00 |
|
|
hasherezade
|
c813d20645
|
[VERSION] 0.3.1
|
2021-09-07 11:55:28 +02:00 |
|
|
hasherezade
|
ce0e9dac89
|
[FEATURE] Incremented subversion
|
2021-09-04 18:31:43 +02:00 |
|
|
hasherezade
|
7ccc63ae7e
|
[BUGFIX] Treat as a new IAT only those that have more than 1 thunk (Issue #89)
|
2021-09-04 07:24:03 +02:00 |
|
|
hasherezade
|
783ff31234
|
[FEATURE] Treat PE as expanded if any section has filled cave (Issue #90)
|
2021-09-03 20:36:42 +02:00 |
|
|
hasherezade
|
85df8e1e64
|
[VERSION] Incremented subversion
|
2021-09-03 20:02:10 +02:00 |
|
|
hasherezade
|
dd8a6f60f1
|
[FEATURE] Hidden debug strings. Incremented version
|
2021-09-03 13:42:13 +02:00 |
|