Age | Commit message (Collapse) | Author | Files | Lines |
|
Returns the process environment block (PEB) of a process.
|
|
Marshals data from an unmanaged block of memory in an arbitrary process
to a newly allocated managed object of the specified type. In other
words, it will parse and return a structure at a known memory address in
any process.
|
|
* The script now silently continues if the ps1xml file is not present.
* Removed compiler parameter code. This was a remnant of the first
version of Get-KernelModuleInfo when it compiled code.
* Improved the heuristics for determining when the last kernel module is
encountered.
|
|
Get-KernelModuleInfo utilizes reflection exclusively now and no longer
requires compilation of C# code. This means that is runs entirely in
memory.
|
|
Returns loaded kernel module information.
|
|
|
|
Get-Strings dumps strings from any file in Ascii and/or Unicode.
|
|
This extends the built-in Get-Member cmdlet by adding the '-Private'
parameter for dissecting .NET types.
|
|
Added Get-ILDisassembly.
Added RE_Tools folder for all current and future reverse engineering
tools.
|