hasherezade/hollows_hunter

Fork 0

mirror of https://github.com/hasherezade/hollows_hunter.git synced 2026-10-11 21:49:55 +00:00

T

hasherezade 58c81f5edb [VERSION] 0.3.9.8

2024-11-02 12:42:43 -07:00

.github/workflows

[NOBIN] Added Doxyfile and config for automated docs deployment

2021-08-02 14:58:13 +02:00

krabsetw @ 6b3152dbe3

Updated krabsetw

2024-09-01 11:59:56 -07:00

logo

[NOBIN] Improved icon (added big resolutions)

2021-08-11 20:23:02 +02:00

paramkit @ fbead40e41

Updated paramkit

2023-07-27 07:39:42 -07:00

params_info

[FEATURE] Updated pe-sieve. Support the new rebase parameter

2024-11-01 15:20:41 -07:00

pe-sieve @ 1dedbd059c

Updated pe-sieve

2024-11-01 18:11:49 -07:00

util

[REFACT] Small cleanup

2024-10-31 14:26:56 -07:00

.appveyor.yml

[NOBIN] In AppVeyor: set architecture explicitly

2024-03-29 10:25:29 -07:00

.gitignore

[FEATURE] Added version info

2022-11-05 06:20:08 -07:00

.gitmodules

ETW

2024-03-06 22:00:22 +00:00

CMakeLists.txt

[FEATURE] Define ETW profile as an INI file

2024-11-02 12:21:02 -07:00

Doxyfile

[NOBIN] Added logo to Doxyfile

2021-08-09 18:23:25 +02:00

etw_listener.cpp

[FEATURE] Define ETW profile as an INI file

2024-11-02 12:21:02 -07:00

etw_listener.h

[FEATURE] Define ETW profile as an INI file

2024-11-02 12:21:02 -07:00

etw_settings.cpp

[FEATURE] Define ETW profile as an INI file

2024-11-02 12:21:02 -07:00

etw_settings.h

[FEATURE] Define ETW profile as an INI file

2024-11-02 12:21:02 -07:00

hh_params.cpp

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_params.h

[FEATURE] Unified process filtering between standalone and ETW

2024-09-07 07:49:48 -07:00

hh_report.cpp

[BUGFIX] Fixed filtering the displayed listing of scanned

2024-11-01 14:27:28 -07:00

hh_report.h

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_res.rc

[REFACT] Updated version info

2024-02-24 11:42:39 -08:00

hh_scanner.cpp

[FEATURE] Skip the PID = 0

2024-10-31 14:46:31 -07:00

hh_scanner.h

[FEATURE] Added new parameter: report allowing to regulate what results are included in the report (Issue #21 )

2024-10-30 17:05:48 -07:00

hh_ver_short.h

[VERSION] 0.3.9.8

2024-11-02 12:42:43 -07:00

LICENSE

[NOBIN] Year up

2024-02-24 11:46:35 -08:00

main.cpp

[FEATURE] Changed default profile filename. Show info about the profile used

2024-11-02 12:26:50 -07:00

mingw_build.sh

Update mingw_build.sh

2020-12-29 15:27:01 +01:00

README.md

[NOBIN] Removed redundant info form the README

2024-03-29 09:18:20 -07:00

resources.h

[NOBIN] Added logo

2021-08-09 15:39:37 +02:00

resources.rc

[NOBIN] Added logo

2021-08-09 15:39:37 +02:00

term_util.cpp

[BUGFIX] Use one std mutex (defined in term_util)

2024-06-09 11:07:22 -07:00

term_util.h

[BUGFIX] Use one std mutex (defined in term_util)

2024-06-09 11:07:22 -07:00

README.md

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

📦 Uses: PE-sieve (the library version).

❓ PE-sieve FAQ - Frequently Asked Questions

📖 Read Wiki

Clone

Use recursive clone to get the repo together with all the submodules:

git clone --recursive https://github.com/hasherezade/hollows_hunter.git

Builds

Download the latest release, or read more.

Available also via Chocolatey