hasherezade/pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
License & maintenance
BSD-2-Clause is a permissive license: free to use commercially with attribution.
Last code push 4 months ago.