admin/MBCProject-mbc-markdown
1
0
Fork 0
mirror of https://github.com/MBCProject/mbc-markdown synced 2026-06-08 11:36:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create revoked.md (#173)

Browse Source 
* Create revoked.md

Added table for tracking revoked IDs.  Unsure of the reason for C0032.004's revocation, although my speculation based on google search is included.

* Update revoked.md

Fixed dates

* Update revoked.md

Added C0013
This commit is contained in:
brightmt
2025-01-03 13:52:23 -05:00
committed by GitHub
parent f88fdabdad
commit cbc9bb78d4
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
revoked.md
+10
View File
@@ -0,0 +1,10 @@
# Revoked Behaviors and Methods
The Malware Behavior Catalog has revoked a small number of behaviors and methods as it has evolved. The IDs for revoked behaviors and methods are not re-used. If it appears that we are missing behavior or methods IDs, this page will explain what revoked IDs previously represented, when they were retired, and the reason for retiring them.
| Revoked ID | Behavior or Method | Revocation Date | Reason |
|--- |--- |--- |--- |
| C0013 | UDP Communication | 25 September 2020 | Merged into C0001 because UDP also communicates over socket interfaces |
| B0001.007 | Interrupt 1 | 2 August 2022 | Merged into B0001.006 to create a more general 'Interruption' method |
| B0012.004 | Variable Recomposition | 21 November 2022 | Moved to B0032.021 |
| C0032.004 | Verhoeff | 1 February 2023 | Not actually used in malware |
| E1608 | Install Certificate | 14 February 2024 | Changed from enhanced ATT&CK technique ID (E-prefix) to enhanced ATT&CK sub-technique ID (F-prefix). Current ID is F0016 |