Skip to content

Yara scanner that enumerates process memory and then scans it for yara sigs. Not very user friendly currently

Notifications You must be signed in to change notification settings

Jquinn147/AmIInfected

Repository files navigation

Warning

This program is meant to be run and then left alone. like I said, it's in its early stage. clicking away From the cmd window can lead to things getting...unpredictable.

So just don't do it, unless youre trying to close it.

Requirements

  • Yara exe
  • Yara Rule List
  • Output folder

Description

AMIINFECTED is a process enumerator/yara memory scanner. Using GetProcessById and a set max fuzz point, it guesses all open processes and then runs YARA on all processes enumerated

Executable is located in bin/debug

About

Yara scanner that enumerates process memory and then scans it for yara sigs. Not very user friendly currently

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Languages