Skip to content

[feature] follow process creation through DLL injection. #1

@Imagine-Programming

Description

@Imagine-Programming

hindsight could be a bit more useful when debugging packed binaries (like SFX archives) when it would know when the debugged process is going to start a new process. There are several ways of going about this, but a nice method of approach would be to inject a generic debugging DLL into the debugged process that can hook i.e. the CreateProcess calls from the debugged process.

This would also help debugging the process when it starts itself with different parameters.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions