SysAnalyzer

SysAnalyzer can automatically monitor and compare:

• Running Processes
• Open Ports
• Loaded Drivers
• Injected Libraries
• Key Registry Changes
• APIs called by a target process
• File Modifications
• HTTP, IRC, and DNS traffic

SysAnalyzer also comes with a ProcessAnalyzer tool which can perform the following tasks:

• Create a memory dump of target process
• parse memory dump for strings
• parse strings output for exe, reg, and url references
• scan memory dump for known exploit signatures
  

Descargar