Morph MORPH
SIGN IN SIGN UP
dhruvhead / pe-sieve UNCLAIMED
0 0 1 C++

COMMITS

/ scanners/thread_scanner.cpp
stats
January 18, 2023
H
[FEATURE] Use standard deviation calculator in the rule for obfuscated areas
hasherezade committed
3ba5512
January 17, 2023
H
[REFACT] Moved stats to the 'stats' directory
hasherezade committed
37a2f84
H
[FEATURE] Added configuration to the rules. Use strings to detection of code
hasherezade committed
2332f08
January 16, 2023
H
[FEATURE] Added detection of strings in the scanned content
hasherezade committed
0320341
January 15, 2023
H
[REFACT] RulesMatcherSet in a separate class. Refactored counting most frequent values
hasherezade committed
1cea806
January 8, 2023
H
[FEATURE] Added 'stats' parameter to enable/disable statistics
hasherezade committed
46179bd
H
[FEATURE] Added stats analyzer
hasherezade committed
b7ad060
January 6, 2023
H
[REFACT] In AreaStatsCalculator: pass the stats variable to be filled
hasherezade committed
1adf457
January 5, 2023
H
[W-I-P] Added shellcode detection by statistics
hasherezade committed
17dc288
H
[REFACT] Refactored calculating the stats
hasherezade committed
ee65dd4
H
[FEATURE] Display thread wait reason in human readable form
hasherezade committed
c4505a0
H
[FEATURE] Added stats to the thread scan
hasherezade committed
40954bf
H
[REFACT] Moved calculating stats to a class AreaStatsCalculator
hasherezade committed
60b61bb
H
[REFACT] Moved entropy to stats
hasherezade committed
dbf75d9
January 3, 2023
H
[FEATURE] In ThreadScanner: fetch isReflection flag from the upper layer
hasherezade committed
2ea193c
January 2, 2023
H
[FEATURE] In ThreadScan: use entropy to filter the results (to minimize FP)
hasherezade committed
4058185
H
[FEATURE] Add calculating entropy of the scanned memory pages
hasherezade committed
2487065
August 30, 2022
H
[BUGFIX] Ensure the thread was created before wait
hasherezade committed
b058f3f
August 23, 2022
S
fix clang compile issues (#109)
secDre4mer committed
7762e96
February 10, 2022
H
[REFACT] Hidden debug strings
hasherezade committed
b0854e6
H
[FEATURE] Less restrictive check for .NET JITs
hasherezade committed
9a15301
H
[FEATURE] In ThreadScanner: filter-out .NET JIT shellcodes at scan level
hasherezade committed
038087d
H
[FEATURE] More premissive rules to check threads. Added more details in the thread report
hasherezade committed
9947b05
February 8, 2022
H
[BUGFIX] Fixed missing variable definition in 32bit mode
hasherezade committed
2cd8269
H
[FEATURE] Improved param description. Added more debugs
hasherezade committed
d4b0bb7
H
[FEATURE] Enum stack frames in a separate thread, to prevent stucking
hasherezade committed
b76f17a
H
[REFACT] Small cleanup. Added comments
hasherezade committed
4a5d7d6
H
[REFACT] Do not collect the full stack. Added one more accepted condition to scan the thread
hasherezade committed
d1c8179
H
[FEATURE] Filter threads depending on the state. Removed redundant functions
hasherezade committed
fd0bfc6
February 7, 2022
H
[FEATURE] Hidden debug strings
hasherezade committed
2153617
H
[BUGFIX] Scan stack using symbols
hasherezade committed
b64a80a
H
[WIP] Added stack frames enumeration
hasherezade committed
db34ad8
H
[FEATURE] Fetch extended info about threads
hasherezade committed
a20c74f
H
[FEATURE] Search function name
hasherezade committed
d12c691
H
[FEATURE] In ThreadScanReport: changed 'access' to 'protection'
hasherezade committed
685c766
H
[FEATURE] Create a report from the thread scan
hasherezade committed
d043b82
H
[BUGFIX] Added missing header
hasherezade committed
4c47e9c
H
[WIP] Added thread scanner
hasherezade committed
b023176