hasherezade
|
673ce6c91d
|
[REFACT] Removed PrintDbg from custom ntddk
|
2026-04-14 15:00:58 +02:00 |
|
hasherezade
|
c78226c09e
|
[REFACT] Explicit integer cast
|
2026-04-02 00:29:29 +02:00 |
|
hasherezade
|
f97f8a92ef
|
[BUGFIX] In util::process_start_time: fixed value returned on failure
|
2025-01-31 05:21:16 -08:00 |
|
hasherezade
|
ad266de0ce
|
[REFACT] Small cleanup
|
2025-01-24 04:51:16 -08:00 |
|
hasherezade
|
db7f88a769
|
[BUGFIX] Fixed retrieving process start time
|
2025-01-18 07:47:31 -08:00 |
|
hasherezade
|
8c5f325d8b
|
[REFACT] Small cleanup
|
2024-10-31 14:26:56 -07:00 |
|
hasherezade
|
70acb66ffd
|
[BUGFIX] Added missing header
|
2024-10-31 13:52:54 -07:00 |
|
hasherezade
|
ea032ba171
|
[FEATURE] Limit ETW scan by HH filters: pname, pid lists
|
2024-04-07 15:53:45 -07:00 |
|
hasherezade
|
d608bad519
|
[BUGFIX] Fixed process_util
|
2024-04-07 15:36:00 -07:00 |
|
hasherezade
|
10bf584578
|
[REFACT] Moved process_util to a separate file, refactored
|
2024-04-07 15:23:35 -07:00 |
|
cccs-mog
|
9fb030d13c
|
ETW
|
2024-03-06 22:00:22 +00:00 |
|
hasherezade
|
cbc028baa7
|
[REFACT] Updated paramkit. Use function from paramkit for conversions
|
2021-09-07 09:42:14 +02:00 |
|
hasherezade
|
56fb5f86b8
|
[BUGFIX] Fixed headers (to compile with MinGW)
|
2021-06-25 19:03:41 +02:00 |
|
hasherezade
|
ea1586373c
|
[REFACT] Use get_number to get int param
|
2021-04-30 18:59:01 +02:00 |
|
hasherezade
|
2ab76a61a7
|
[REFACT] Removed redundant headers
|
2021-04-30 17:50:21 +02:00 |
|
hasherezade
|
e7936dc844
|
[FEATURE] In case of unknown param, check for similar strings
|
2021-04-30 17:06:12 +02:00 |
|
hasherezade
|
4599f30cb2
|
In suspend/resume: added function pointer checks
|
2021-04-22 19:50:53 +02:00 |
|
hasherezade
|
c6a1381fd7
|
[REFACT] Small cleanup in the function: GetParentProcessID
|
2021-04-22 19:47:40 +02:00 |
|
hasherezade
|
95b3d5e995
|
[FEATURE] Changes in the ptimes param. Keep timestamp of HH creation
|
2021-04-11 19:03:46 +02:00 |
|
hasherezade
|
7f6eea5485
|
[REFACT] Convert parameters to numbers using string stream
|
2021-04-11 17:34:09 +02:00 |
|
hasherezade
|
2d04d09028
|
[FEATURE] Allow filtering processes by a time of creation (Issue #9)
|
2021-03-03 07:01:03 +01:00 |
|
hasherezade
|
0d7dbaded7
|
[REFACT] Refactored to build with MinGW
|
2020-08-09 18:33:09 +02:00 |
|
hasherezade
|
80987471e6
|
[BUGFIX] Set DebugPrivilege in HH before starting the scan.
|
2020-06-08 09:35:45 +02:00 |
|
hasherezade
|
3adeb60399
|
[FEATURE] Added param: pid (allow to scan processes list)
|
2020-03-06 20:35:21 +01:00 |
|
hasherezade
|
45d03f3805
|
[BUGFIX] In process names: skip empty elements
|
2020-03-06 18:23:56 +01:00 |
|
hasherezade
|
5e31fb846d
|
[REFACT] Removed unused condition
|
2019-11-23 05:44:41 +01:00 |
|
hasherezade
|
1e3a2d67c4
|
[FEATURE] In /pname: support multiple process names
|
2019-11-14 22:50:43 +01:00 |
|
hasherezade
|
7c37c29871
|
[FEATURE] Added option 'susp' to suspend suspiciou processes
|
2019-08-01 16:55:31 +02:00 |
|