hasherezade/hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

30 best points · 5 comments · 1 Hacker News post · 2,431 GitHub stars · View on GitHub

Hacker News discussions

• Hollows Hunter – Scans all running processes (30 points, 5 comments, by maydemir, 2022-01-30)