COMMITS
/ utils/artefacts_util.cpp January 2, 2023
November 4, 2022
H
[FEATURE] Extended prolog pattern to avoid false positives (Issue #108)
hasherezade committed
November 3, 2022
H
[FEATURE] Added one more shellcode detection pattern (Issue #108)
hasherezade committed
January 23, 2022
H
[BUGFIX] Fixed page access checks
hasherezade committed
July 31, 2021
H
[FEATURE] In util: added is_normal_inaccessible (to check access to inaccessible pages)
hasherezade committed
July 2, 2021
H
[FEATURE] Added one more 64 bit prolog pattern
hasherezade committed
June 20, 2021
H
[NOBIN] Cleanup
hasherezade committed
H
[FEATURE] Added a detection pattern
hasherezade committed
October 12, 2020
H
[REFACT] Refactored . Added a function to util
hasherezade committed
July 20, 2020
H
[REFACT] Refactored pattern checking
hasherezade committed
H
[BUGFIX] Added prefixed to patterns (to avoid false positives)
hasherezade committed
H
[FEATURE] Added one more 64 bit prolog pattern
hasherezade committed
H
[REFACT] Simplified 64bit patterns: removed prefixes
hasherezade committed
H
[NOBIN] Fixed a comment
hasherezade committed
H
[BUGFIX] Fixed return value in
hasherezade committed
July 18, 2020
H
[REFACT] Use function is_executable from util in WorkingsetScanner
hasherezade committed
H
[BUGFIX] Fixed detecting MEM_SEC as executable if access changed (Issue #66)
hasherezade committed
June 11, 2020
H
[FEATURE] Before checking code patterns, check if the area is not empty
hasherezade committed
June 2, 2020
H
[REFACT] Wrap more utils in namespace pesieve::util
hasherezade committed
February 26, 2020
H
[FEATURE] Added more shellcode detection patterns (Issue #50)
hasherezade committed
November 1, 2019
H
[BUGFIX] If DOS header not found, detect the payload by NT Header
hasherezade committed
August 4, 2019
H
[BUGFIX] Recognize bitness of the shellcode before retrieving imports
hasherezade committed
August 24, 2018
H
[BUGFIX] Added another prolog variant
hasherezade committed
August 6, 2018
H
[BUGFIX] Removed debug string (using undefined variable)
hasherezade committed
H
[FEATURE] Scan all executable sections for modifications
hasherezade committed