28 Commits
Author SHA1 Message Date
hasherezade 673ce6c91d [REFACT] Removed PrintDbg from custom ntddk 2026-04-14 15:00:58 +02:00
hasherezade c78226c09e [REFACT] Explicit integer cast 2026-04-02 00:29:29 +02:00
hasherezade f97f8a92ef [BUGFIX] In util::process_start_time: fixed value returned on failure 2025-01-31 05:21:16 -08:00
hasherezade ad266de0ce [REFACT] Small cleanup 2025-01-24 04:51:16 -08:00
hasherezade db7f88a769 [BUGFIX] Fixed retrieving process start time 2025-01-18 07:47:31 -08:00
hasherezade 8c5f325d8b [REFACT] Small cleanup 2024-10-31 14:26:56 -07:00
hasherezade 70acb66ffd [BUGFIX] Added missing header 2024-10-31 13:52:54 -07:00
hasherezade ea032ba171 [FEATURE] Limit ETW scan by HH filters: pname, pid lists 2024-04-07 15:53:45 -07:00
hasherezade d608bad519 [BUGFIX] Fixed process_util 2024-04-07 15:36:00 -07:00
hasherezade 10bf584578 [REFACT] Moved process_util to a separate file, refactored 2024-04-07 15:23:35 -07:00
cccs-mog 9fb030d13c ETW 2024-03-06 22:00:22 +00:00
hasherezade cbc028baa7 [REFACT] Updated paramkit. Use function from paramkit for conversions 2021-09-07 09:42:14 +02:00
hasherezade 56fb5f86b8 [BUGFIX] Fixed headers (to compile with MinGW) 2021-06-25 19:03:41 +02:00
hasherezade ea1586373c [REFACT] Use get_number to get int param 2021-04-30 18:59:01 +02:00
hasherezade 2ab76a61a7 [REFACT] Removed redundant headers 2021-04-30 17:50:21 +02:00
hasherezade e7936dc844 [FEATURE] In case of unknown param, check for similar strings 2021-04-30 17:06:12 +02:00
hasherezade 4599f30cb2 In suspend/resume: added function pointer checks 2021-04-22 19:50:53 +02:00
hasherezade c6a1381fd7 [REFACT] Small cleanup in the function: GetParentProcessID 2021-04-22 19:47:40 +02:00
hasherezade 95b3d5e995 [FEATURE] Changes in the ptimes param. Keep timestamp of HH creation 2021-04-11 19:03:46 +02:00
hasherezade 7f6eea5485 [REFACT] Convert parameters to numbers using string stream 2021-04-11 17:34:09 +02:00
hasherezade 2d04d09028 [FEATURE] Allow filtering processes by a time of creation (Issue #9) 2021-03-03 07:01:03 +01:00
hasherezade 0d7dbaded7 [REFACT] Refactored to build with MinGW 2020-08-09 18:33:09 +02:00
hasherezade 80987471e6 [BUGFIX] Set DebugPrivilege in HH before starting the scan. 2020-06-08 09:35:45 +02:00
hasherezade 3adeb60399 [FEATURE] Added param: pid (allow to scan processes list) 2020-03-06 20:35:21 +01:00
hasherezade 45d03f3805 [BUGFIX] In process names: skip empty elements 2020-03-06 18:23:56 +01:00
hasherezade 5e31fb846d [REFACT] Removed unused condition 2019-11-23 05:44:41 +01:00
hasherezade 1e3a2d67c4 [FEATURE] In /pname: support multiple process names 2019-11-14 22:50:43 +01:00
hasherezade 7c37c29871 [FEATURE] Added option 'susp' to suspend suspiciou processes 2019-08-01 16:55:31 +02:00