Search Results for "full system simulator"

Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. ...

ProxyCrypt is a command line tool that creates encrypted volumes within a file or a hard drive. Encryption and decryption are made on the fly, allowing you to use encrypted volumes like normal ones. Designed for paranoids and advanced users, it is also fast, very lightweight, open source and easy to recompile. See the features below. It works as a "proxy" for the AIM driver or the ImDisk driver. AIM driver is included in the full package. See the documentation for more informations...

Try is a Linux command-line utility that lets users run a command and inspect its effects before deciding whether to commit those changes to the live system. It works by using Linux namespaces through unshare together with overlay-based filesystem techniques so that commands can execute in an isolated view of the system rather than directly modifying the host environment immediately. This makes it useful for experimenting with package installation, system changes, and other shell commands where users want a chance to review the outcome first. ...