hollows_hunter
SIEM & Threat DetectionA command‑line memory scanner that detects and dumps malicious implants such as hollowed processes, shellcode, hooks, and in‑memory patches.
Features
- Scans all running processes or targets by PID/name/creation time
- Detects hollowed PEs, injected shellcode, API hooks and in‑memory patches
- Supports continuous scanning via `/loop` mode (64‑bit) and ETW listener mode
Recent releases
View all 1 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
chocolatey
Platforms
windows
