ELFIE SCANNER

Summary from the TLDR InfoSec newsletter

ELFie Scanner is a C++ POC for advanced process memory scanning that attempts to detect a number of malicious techniques used by threat actors and those that have been incorporated into open-source user-mode rootkits. It inspects every running process (both x86/x64) and its corresponding loaded libraries to look for evil. It then outputs the resultant telemetry into a NDJSON file.