Alberto Ortega
6b8bcf189a
house-keeping
2015-01-01 17:17:06 +01:00
Alberto Ortega
abb13ad351
Adds GetTickCount() sleep patching detection
2015-01-01 13:08:47 +01:00
Alberto Ortega
417963345c
Minor bugfix
2014-12-31 20:28:11 +01:00
Alberto Ortega
02a6590271
Huge refactor, TRUE FALSE types added, utils functions added, fix encoding, trailing spaces, CRLF removed
2014-12-31 20:24:11 +01:00
Alberto Ortega
6912bb1565
Compilation fixes
2014-12-30 16:53:10 +01:00
Alberto Ortega
9816ed8eaa
Adding device detection #13 (Thorsten commit)
2014-12-29 01:20:21 +01:00
Alberto Ortega
30892b519c
Merge pull request #21 from Thorsten-Sick/GetDiskFreeSpace
...
Added GetDiskFreeSpace based disk space detection with the min size 60 G...
2014-12-29 00:44:46 +01:00
Thorsten Sick
f4dc13aec8
Added GetDiskFreeSpace based disk space detection with the min size 60 GB
2014-07-15 13:47:51 +02:00
Alberto Ortega
226200924d
Merge pull request #18 from nilp0inter/unattended_and_retval2
...
Unattended analysis and return value. (Fixed)
2014-05-02 15:35:50 +02:00
Roberto Abdelkader Martínez Pérez
a8be2e22bd
Restored binary file to previous verion. Let's the author compile it himself.
2014-05-02 13:44:57 +02:00
Roberto Abdelkader Martínez Pérez
78eff7982e
Merge branch 'unattended_and_retval' into unattended_and_retval2
2014-05-02 13:37:58 +02:00
Roberto Abdelkader Martínez Pérez
9a760b8765
Changed strcmp for strncmp.
2014-05-02 13:31:34 +02:00
Alberto Ortega
05859e7db5
Merge pull request #16 from Thorsten-Sick/vbox_tools
...
scanning for VirtualBox tools
2014-05-02 13:13:48 +02:00
Roberto Abdelkader Martínez Pérez
c54d7516fd
Added command line option -q
that disables the last getchar()
for unattended analysis.
...
Changed command return value to match the analysis result; with the following scheme:
- Everything `OK` -> 0
- Something `suspicious` but nothing `traced` -> 1
- Something `traced` -> 2
2014-05-01 19:47:45 +02:00
Thorsten Sick
9477202717
scanning for VirtualBox tools
2014-04-03 15:07:12 +02:00
Thorsten Sick
c4edcc791e
Adding device detection
2014-03-20 11:32:49 +01:00
Alberto Ortega
75299a4fc9
Merge pull request #12 from Thorsten-Sick/vbox_collection2
...
VBox tricks, code cleanup
2014-02-21 10:59:35 +01:00
Thorsten Sick
0bec600f71
Some code cleanup
2014-02-21 10:38:43 +01:00
Thorsten Sick
5fe5830875
Adding comments, some cleanup
2014-02-21 10:18:04 +01:00
Thorsten Sick
144e204c65
Removing Copy and Paste artifacts
2014-02-21 09:36:41 +01:00
Thorsten Sick
7dd7563aee
Checking services in registry
2014-02-20 15:45:23 +01:00
Thorsten Sick
79bf3e7430
Added two more registry keys: FADT and RSDT in Hardware/ACPI
2014-02-20 12:01:13 +01:00
Thorsten Sick
e15a37eb96
Looking for VirtualBox processes
2014-02-20 11:48:16 +01:00
Alberto Ortega
b040fcf4bd
Merge pull request #11 from Thorsten-Sick/vbox_collection
...
Vbox collection
2014-02-19 16:31:17 +01:00
Thorsten Sick
214bcadc4b
Adding Walied Assar credits
2014-02-18 09:37:08 +01:00
Thorsten Sick
b45a1334c6
network share detection
2014-02-17 15:57:12 +01:00
Thorsten Sick
925db8543e
Registry IDE device scanning
2014-02-17 14:58:14 +01:00
Thorsten Sick
6d80982d41
VirtualBox tray tool window detection
2014-02-17 11:53:40 +01:00
Thorsten Sick
69d2ffc190
VirtualBox pipe detection
2014-02-17 10:56:00 +01:00
Thorsten Sick
e2ea0340b6
ACPI key added
2014-02-17 10:15:24 +01:00
Thorsten Sick
2902f5f21f
Added pseudo-device vm detection
2014-02-17 09:56:19 +01:00
Thorsten Sick
7830b7a7d6
Added missing sysfile2 to header file
2014-02-17 09:45:31 +01:00
Alberto Ortega
2ced233a84
Merge pull request #10 from Thorsten-Sick/vbox_mac
...
Vbox mac
2014-02-14 18:46:28 +01:00
Thorsten Sick
f0e2ce07f9
Looking for NICs with VirtualBox Mac addresses
2014-02-14 15:07:54 +01:00
Thorsten Sick
083926cf24
libraries added to Makefile
2014-02-14 15:02:27 +01:00
Alberto Ortega
b639688a7b
Merge pull request #9 from Thorsten-Sick/multi_virtualbox_files_support
...
Multi virtualbox files support
2014-02-14 14:34:22 +01:00
Thorsten Sick
1f13f9bda4
Adding detection for system32 virtualbox dll and exe files
2014-02-13 16:47:07 +01:00
Thorsten Sick
af05de0f78
Supporting all drivers now
2014-02-13 16:33:29 +01:00
Alberto Ortega
33c836c913
Merge pull request #7 from Thorsten-Sick/linux_compile
...
lower case file name is essential for linux compilation
2014-02-13 15:59:55 +01:00
Thorsten Sick
34ada0bc8f
lower case file name is essential for linux compilation
2014-02-13 14:10:29 +01:00
Alberto
f7275532a2
Minor change in README
2014-01-01 14:02:27 +01:00
Alberto
14b29d5b02
Bump v03
2014-01-01 14:00:09 +01:00
Alberto Ortega
3ade0a8ade
Merge pull request #6 from espenfjo/master
...
Add Makefile for cross compiling on Linux
2013-11-19 00:19:05 -08:00
Espen Fjellvær Olsen
1bccb0a07d
Add Makefile for cross compiling on Linux
2013-11-18 19:35:19 +01:00
Alberto Ortega
ecf2dfab81
Minor change in readme
2013-10-23 12:58:17 +02:00
Alberto Ortega
b273134f0c
Minor change
2013-08-14 08:47:32 +02:00
Alberto
516e42caaa
Minor change
2013-08-13 19:26:41 +02:00
Alberto Ortega
7955fb25c3
Minor change in readme
2013-07-04 15:25:06 +02:00
Alberto
6dc3bed8a1
Updated readme, added some more examples
2013-06-09 20:46:21 +02:00
Alberto
c31f7f5d44
Submitted version 2.5
2013-06-09 20:21:01 +02:00