hasherezade/hollows_hunter

Fork 0

mirror of https://github.com/hasherezade/hollows_hunter.git synced 2026-10-11 21:49:55 +00:00

T

hasherezade 0a11c915cd Updated pe-sieve

2024-11-01 05:13:43 -07:00

.github/workflows

[NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

krabsetw @ 6b3152dbe3

Updated krabsetw

2024-09-01 11:59:56 -07:00

logo

[NOBIN] Improved icon (added big resolutions)

2021-08-11 20:23:02 +02:00

paramkit @ fbead40e41

Updated paramkit

2023-07-27 07:39:42 -07:00

params_info

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

pe-sieve @ 14aa1bb54f

Updated pe-sieve

2024-11-01 05:13:43 -07:00

util

[REFACT] Small cleanup

2024-10-31 14:26:56 -07:00

.appveyor.yml

[NOBIN] In AppVeyor: set architecture explicitly

2024-03-29 10:25:29 -07:00

.gitignore

[FEATURE] Added version info

2022-11-05 06:20:08 -07:00

.gitmodules

ETW

2024-03-06 22:00:22 +00:00

CMakeLists.txt

Update CMakeLists.txt

2024-11-01 01:04:17 +01:00

Doxyfile

[NOBIN] Added logo to Doxyfile

2021-08-09 18:23:25 +02:00

etw_listener.cpp

[REFACT] Small cleanup

2024-10-31 14:26:56 -07:00

etw_listener.h

[REFACT] Cleaned ETW ifdef

2024-10-31 13:41:52 -07:00

hh_params.cpp

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_params.h

[FEATURE] Unified process filtering between standalone and ETW

2024-09-07 07:49:48 -07:00

hh_report.cpp

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_report.h

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_res.rc

[REFACT] Updated version info

2024-02-24 11:42:39 -08:00

hh_scanner.cpp

[FEATURE] Skip the PID = 0

2024-10-31 14:46:31 -07:00

hh_scanner.h

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_ver_short.h

[FEATURE] Unified process filtering between standalone and ETW

2024-09-07 07:49:48 -07:00

LICENSE

[NOBIN] Year up

2024-02-24 11:46:35 -08:00

main.cpp

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

mingw_build.sh

Update mingw_build.sh

2020-12-29 15:27:01 +01:00

README.md

[NOBIN] Removed redundant info form the README

2024-03-29 09:18:20 -07:00

resources.h

[NOBIN] Added logo

2021-08-09 15:39:37 +02:00

resources.rc

[NOBIN] Added logo

2021-08-09 15:39:37 +02:00

term_util.cpp

[BUGFIX] Use one std mutex (defined in term_util)

2024-06-09 11:07:22 -07:00

term_util.h

[BUGFIX] Use one std mutex (defined in term_util)

2024-06-09 11:07:22 -07:00

README.md

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

📦 Uses: PE-sieve (the library version).

❓ PE-sieve FAQ - Frequently Asked Questions

📖 Read Wiki

Clone

Use recursive clone to get the repo together with all the submodules:

git clone --recursive https://github.com/hasherezade/hollows_hunter.git

Builds

Download the latest release, or read more.

Available also via Chocolatey