About pe-sieve
PE-sieve scans a specified running process for signs of potentially malicious implants and can dump identified material for analysis. The supplied description lists replaced or injected executable code, shellcode, hooks, and in-memory patches as examples of what it can recognize. These changes can be relevant in a forensic investigation of suspicious process behavior. PE-sieve is intended for defensive examination of process state. The product information does not specify supported operating systems, detection logic, output formats, or how findings are validated. It also does not claim that every malicious modification will be found. Its documented role is scanning a process and extracting suspicious material for further analysis, with results requiring interpretation in context.
Categories
Platforms
Website & Downloads
Trusted package or store listing
Related software
- 0patch Agent — 0patch Agent is a security utility for applying micropatches to vulnerabilities in many programs.
- 3va — 3va is a JavaScript and TypeScript runtime built on the V8 engine.
- A1RunGuard — A1RunGuard is a Windows process firewall for controlling which programs can run.
- AES Crypt — AES Crypt is file-encryption software for Windows that integrates with the desktop and also includes a command-line program.
- Actifile Agent — Actifile Agent is an endpoint tool connected to a software platform for discovering, monitoring, and protecting sensitive data.
- Active Directory Rights Management Services Client 2.1 — Active Directory Rights Management Services Client helps protect access to and use of information handled by compatible applications.
