hollows_hunter
SIEM & Threat DetectionA command‑line tool that scans and dumps potentially malicious in‑memory implants using a passive memory scanner based on PE‑sieve.
Features
- Scans processes for replaced/injected PEs, shellcodes, hooks and in‑memory patches
- Select targets by PID list, name list or creation time relative to execution
- Supports continuous scanning via `/loop` argument
- Can run as an ETW listener (64‑bit only) for real‑time monitoring
Recent releases
View all 1 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
binary
chocolatey
Platforms
windows
