DLLHijackHunter

1. 01

   Discover

   Enumerate execution vectors across services, scheduled tasks, startup items, COM objects, and auto-elevate binaries.

2. 02

   Validate

   Prune false positives with hard and soft gates, then ask the Windows loader directly with --verify-load.

3. 03core

   Confirm

   Deploy a benign canary DLL and prove the hijack ran in the target's context before reporting it.

4. 04

   Report

   Tier findings CONFIRMED → HIGH → MEDIUM → LOW, score impact, and correlate multi-step attack chains.