mirror of https://github.com/MBCProject/mbc-markdown synced 2026-06-08 11:36:36 +00:00

Files

T

History

brightmt 7f3bfe2c7d Update capa to v8.0.1 (#174 )

* Update disable-or-evade-security-tools.md

Added overwrite DLL .text section to remove hooks rule released in 7.2

* Update socket-communication.md

Added rule "attach BPF to socket on Linux" released in v 7.2

* Update self-deletion.md

Updated for congruence with CAPA 7.2 changes

* Update hijack-execution-flow.md

Updated APIs for "execute shellcode via Windows callback function"

* Update software-packing.md

Added "packed with nmm-protect" from CAPA 7.4

2024-12-26 15:06:07 -05:00

dns-communication.md

Staging (#170 )

2024-11-18 15:03:18 -05:00

ftp-communication.md

Staging (#124 )

2023-09-20 15:57:32 -04:00

http-communication.md

Staging (#170 )

2024-11-18 15:03:18 -05:00

icmp-communication.md

Staging (#170 )

2024-11-18 15:03:18 -05:00

interprocess-communication.md

Staging (#170 )

2024-11-18 15:03:18 -05:00

README.md

Staging (#124 )

2023-09-20 15:57:32 -04:00

smtp-communication.md

Updated MBC-CAPE signature mappings (#153 )

2024-06-30 15:08:20 -04:00

socket-communication.md

Update capa to v8.0.1 (#174 )

2024-12-26 15:06:07 -05:00

wininet.md

Staging (#170 )

2024-11-18 15:03:18 -05:00

README.md

ID	OC0006
Created	14 August 2020
Last Modified	8 May 2023

Communication Micro-objective

Micro-behaviors that enable malware to communicate.

DNS Communication C0011
FTP Communication C0004
HTTP Communication C0002
ICMP Communication C0014
Interprocess Communication C0003
SMTP Communication C0012
Socket Communication C0001
WinINet Communication C0005