admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

updated rules

Browse Source
This commit is contained in:
Yacine Elhamer
2023-08-21 19:14:45 +02:00
parent 3a42318eae
commit 0aea484e04
264 changed files with 854 additions and 341 deletions
Download Patch File Download Diff File Expand all files Collapse all files
load-code/shellcode/execute-shellcode-via-createthreadpoolwait.yml
+1
View File
@@ -6,6 +6,7 @@ rule:
- jakub.jozwiak@mandiant.com
scopes:
static: function
dynamic: process
references:
- https://github.com/S4R1N/AlternativeShellcodeExec/blob/master/CreateThreadPoolWait/CreateThreadPoolWait.cpp
examples: