admin/MBCProject-mbc-markdown
1
0
Fork 0
mirror of https://github.com/MBCProject/mbc-markdown synced 2026-06-08 11:36:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update terminate-process.md

Browse Source 
Added new link and CAPE class for rule
This commit is contained in:
brightmt
2024-10-02 10:02:25 -04:00
committed by GitHub
parent 1317809f48
commit 4874fd4b35
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
micro-behaviors/process/terminate-process.md
+3 -3
View File
@@ -52,9 +52,9 @@ Malware terminates a process.
|[terminate process via kill](https://github.com/mandiant/capa-rules/blob/master/host-interaction/process/terminate/terminate-process-via-kill.yml)|Terminate Process (C0018)|kill|
|[terminate process](https://github.com/mandiant/capa-rules/blob/master/host-interaction/process/terminate/terminate-process.yml)|Terminate Process (C0018)|System.Diagnostics.Process::Kill, System.Diagnostics.Process::WaitForExit, System.Diagnostics.Process::WaitForExitAsync, System.Environment::Exit, System.Windows.Forms.Application::Exit, kernel32.TerminateProcess, ntdll.NtTerminateProcess, kernel32.ExitProcess|
|Tool: CAPE|Mapping|APIs|
|---|---|---|
|[terminates_remote_process](https://github.com/CAPESandbox/community/tree/master/modules/signatures/terminates_remote_process.py)|Terminate Process (C0018)|NtTerminateProcess|
|Tool: CAPE|Class|Mapping|APIs|
|---|--|---|---|
|[terminates_remote_process](https://github.com/CAPESandbox/community/blob/master/modules/signatures/windows/terminates_process.py)|TerminatesRemoteProcess|Terminate Process (C0018)|NtTerminateProcess|
### C0018 Snippet
<details>