H9

This tool is designed to detect malicious Win32 APIs in the Import Address Table(IAT) while the process is running in memory. It can enumerate and collect all processes in memory, including both 32-bit and 64-bit processes. Utilizing a highly effective rule-based methodology, this tool allows for a more precise and targeted detection process>