diff --git a/README.md b/README.md index 5eeabc9..b3de3e0 100644 --- a/README.md +++ b/README.md @@ -427,6 +427,10 @@ My curated list of awesome links, resources and tools DAS MALWERK DAS MALWERK - your one stop shop for fresh malware samples + + hasherezade/libpeconv/runpe + RunPE (aka Process Hollowing) is a well known technique allowing to injecting a new PE into a remote processes, imprersonating this process. The given implementation works for PE 32bit as well as 64bit. + IRIS-H IRIS-H is an online digital forensics tool that performs automated static analysis of files stored in a directory-based or strictly structured formats.