1 个仓库
Awesome GitHub RepositoriesProcess Callstack Analyzers
Engines that identify malicious activity by detecting redirections and anomalies in process callstacks.
Distinct from Process Metadata Analyzers: Distinguishes from general metadata analyzers or debuggers by focusing on security-oriented anomaly detection.
Explore 1 awesome GitHub repository matching security & cryptography · Process Callstack Analyzers. Refine with filters or upvote what's useful.
Awesome Process Callstack Analyzers GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- hasherezade/pe-sieve
hasherezade/pe-sieve
3,559在 GitHub 上查看pe-sieve is a set of diagnostic tools for scanning Windows process memory to identify malicious implants, shellcode, and hooks. It functions as an in-memory implant detector, malware unpacker, and process callstack analyzer designed to locate and dump memory patches and injected code from running processes. The project identifies advanced evasion techniques, such as process hollowing and reflective injection, by verifying portable executable structures in memory. It distinguishes itself by analyzing process callstacks to detect anomalies and redirections and by reconstructing executable heade
Detects malicious activity by identifying anomalies and redirections within a process callstack.
C++anti-malwarehookinglibpeconv
