Skip to content

NtKernelMC/MDE

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Introduction

MDE - ManualMap Detection Engine
Copyrights by NtKernelMC
Date of creation: 07.04.19
Task: Detection of manual-map injected DLLs

FEATURES

Support for multi-threaded scanning
Support of 4th different detection vectors
Detection by DLL Headers
Detection by DLL Thread
Detection by dllMain CRT stub
Detection by Import Table
Support of x64-x86 architectures & Windows OS family from Vista and higher

ФУНКЦИОНАЛ

Поддержка мультипоточного сканнирования
Поддержка до четёрх различных режимов сканнера
Способ обнаружения DLL по PE-заголовкам
Способ обнаружения DLL по созданию потока
Способ обнаружения DLL по dllMain CRT стабе
Способ обнаружения DLL по таблице импорта
Поддержка работы для x64-x86 архитектур на всех OС семества Windows от Vista и выше

Build and Test

Build static library with architecure of your target project.

Contribute

Anyone can make this project better, do pull request with your designs!

About

Manual Mapping Detection Library

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages