v0.3.4
FEATURE
- In
/mignore
- removed buffer limit (Details: #99). WARNING: API change) - New param:
/threads
, enabling scan of the threads' callstack . This is another layer of shellcode detection, allowing to capture "sleeping beacons", and others, decrypted just before the execution. (Read more here)
See also: HollowsHunter v0.3.4 with the latest PE-sieve