From ad18cf327a9e39ecbb9ee2fae3f5f26367e04266 Mon Sep 17 00:00:00 2001 From: "Mariusz B. / mgeeky" Date: Sat, 23 Oct 2021 14:09:31 +0200 Subject: [PATCH] readme --- windows/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/README.md b/windows/README.md index 1682852..5e34eb3 100644 --- a/windows/README.md +++ b/windows/README.md @@ -8,7 +8,7 @@ - **`find-system-and-syswow64-binaries.py`** - Finds files with specified extension in both System32 and SysWOW64 and then prints their intersection. Useful for finding executables (for process injection purposes) that reside in both directories (such as `WerFault.exe`) -- **`findSymbols.py`** - Script that recursively searches through PE files, scans their Imports and Exports and returns those matching filter criterias (like imported from specified module, name regexes, etc.) +- **`findSymbols.py`** - Script that recursively searches through PE files, scans their Imports and Exports and returns those matching filter criterias (like imported from specified module, name regexes, etc.). Uses `multiprocessing` to process files in parallel, dramatically cutting scan time in large directories. ``` :: findSymbols.py - Finds PE Import/Exports based on supplied filters.