Symbol

Supporting Materials for “Symbolic Triage” blog post

Jan 13, 2023 1 min read

Symbolic Triage

This repository contains the supporting materials for the “Symbolic Triage” blog post.

triage.py is the main utility, which implements the symbolic execution and tracing of the Procmon64.exe crashes
- Targets Process Monitor version 3.91
- Is intended to be used as an example of using Triton hand in hand with the Windows debugging API
win_types.py contains windows types used for using the debugger API
procmoncrash.xx contains an xx file of a minimized crash, as described here

GitHub

View Github

Symbol

John was the first writer to have joined pythonawesome.com. He has since then inculcated very effective writing and reviewing culture at pythonawesome which rivals have found impossible to imitate.