https://mnin.blogspot.com/2009/05/volatility-plug-in-for-iateatinline.html
MNIN Security Blog: Volatility Plug-in for IAT/EAT/Inline Hook Detection
I released a new Volatility plug-in called usermode_hooks.py to detect IAT/EAT/Inline rootkit hooks in usermode processes. To use it, ma...
security blogplug inmninvolatilityiat