About hollows-hunter
Hollows Hunter scans running processes for signs of potentially malicious implants and can dump identified material for forensic analysis. The supplied description lists examples such as replaced or injected executable code, shellcode, hooks, and in-memory patches. These are changes that can alter a process while it is running, so examining them can help an analyst investigate suspicious activity. Hollows Hunter’s role is defensive inspection of process state. The available information does not specify which operating-system versions it supports, how detections are validated, or what output formats it produces. It also does not claim that every malicious implant will be found. The tool is intended to assist forensic analysis of running processes, with findings requiring interpretation in the context of the system being examined.
Categories
Platforms
Website & Downloads
Trusted package or store listing
Related software
- 0patch Agent — 0patch Agent is a security utility for applying micropatches to vulnerabilities in many programs.
- 3va — 3va is a JavaScript and TypeScript runtime built on the V8 engine.
- A1RunGuard — A1RunGuard is a Windows process firewall for controlling which programs can run.
- AES Crypt — AES Crypt is file-encryption software for Windows that integrates with the desktop and also includes a command-line program.
- Actifile Agent — Actifile Agent is an endpoint tool connected to a software platform for discovering, monitoring, and protecting sensitive data.
- Active Directory Rights Management Services Client 2.1 — Active Directory Rights Management Services Client helps protect access to and use of information handled by compatible applications.
