From 2a9bcd3ab5ac4389e44c20d61647ee07555d6935 Mon Sep 17 00:00:00 2001 From: Dez Beck Date: Mon, 15 Aug 2022 11:48:36 -0400 Subject: [PATCH] add capa rule distribution info --- capa.md | 80 +++++++++++++++++++++++---------------------------------- 1 file changed, 32 insertions(+), 48 deletions(-) diff --git a/capa.md b/capa.md index e39b2ab..79475fd 100644 --- a/capa.md +++ b/capa.md @@ -144,22 +144,21 @@ ## ATT&CK MAPPING HISTOGRAM ## -| | | | |-----|-----|-----| |Reconnaissance |[0]| | |Resource Development|[0]| | |Initial Access |[0]| | |**Execution**|[8]| **XXXXXXXX** | |**Persistence**|[13]| **XXXXXXXXXXXXX** | -|**Privilege Escalation**|[1] | X | -|**Defense Evasion**|[32]| XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | -|**Credential Access**|[4]| XXXX | -|**Discovery**|[17]| XXXXXXXXXXXXXXXXX | +|**Privilege Escalation**|[1] | **X** | +|**Defense Evasion**|[32]| **XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX** | +|**Credential Access**|[4]| **XXXX** | +|**Discovery**|[17]| **XXXXXXXXXXXXXXXXX** | |Lateral Movement|[0]| | -|**Collection**|[7]| XXXXXXX | -|**Command and Control**|[1]| X | +|**Collection**|[7]| **XXXXXXX** | +|**Command and Control**|[1]| **X** | |Exfiltration|[0]| | -|**Impact**|[5]| XXXXX | +|**Impact**|[5]| **XXXXX** | ## MBC MAPPINGS ## @@ -273,31 +272,21 @@ ## MBC MAPPING HISTOGRAM ## -Anti-Behavioral Analysis [20] **************************************** - -Anti-Static Analysis [9] ****************** - -Collection [4] ******** - -Command and Control [3] ****** - -Credential Access [0] - -Defense Evasion [13] ************************** - -Discovery [6] ************ - -Execution [1] ** - -Exfiltration [0] - -Impact [5] ********** - -Lateral Movement [0] - -Persistence [0] - -Privilege Escalation [0] +| | | | +|-----|-----|-----| +|**Anti-Behavioral Analysis** |[20]| **XXXXXXXXXXXXXXXXXXXX**| +|**Anti-Static Analysis**|[9]| **XXXXXXXXX** | +|**Collection**|[4]| **XXXX** | +|**Command and Control**|[3]| **XXX** | +|Credential Access|[0]| | +|**Defense Evasion**|[13]| **XXXXXXXXXXXXX** | +|**Discovery**|[6]| **XXXXXX** | +|**Execution**|[1]| **X** | +|Exfiltration|[0]| | +|**Impact**|[5]| **XXXXX** | +|Lateral Movement|[0]| | +|Persistence|[0]| | +|Privilege Escalation|[0] | | ## MBC MICRO-BEHAVIOR MAPPING S## @@ -442,18 +431,13 @@ Privilege Escalation [0] ## MBC MICRO-BEHAVIOR MAPPING HISTOGRAM ## -Communication [34] **************************************** - -Cryptography [16] ******************* - -Data [15] ****************** - -File System [11] ************* - -Hardware [4] ***** - -Memory [2] *** - -Operating System [11] ************* - -Process [14] ***************** \ No newline at end of file +| | | | +|-----|-----|-----| +|**Communication** |[34]| **XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX**| +|**Cryptography**|[16]| **XXXXXXXXXXXXXXXX** | +|**Data**|[15]| **XXXXXXXXXXXXXXX** | +|**File System**|[11]| **XXXXXXXXXXX** | +|**Hardware**|[4]| **XXXX** | +|**Memory**|[2]| **XX** | +|**Operating System**|[11]| **XXXXXXXXXXX** | +|**Process**|[14]| **XXXXXXXXXXXXXX** | \ No newline at end of file