admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

updated rules

Browse Source
This commit is contained in:
Yacine Elhamer
2023-08-20 15:39:29 +02:00
parent 850909bd82
commit 8d851f3343
829 changed files with 1366 additions and 1362 deletions
Download Patch File Download Diff File Expand all files Collapse all files
load-code/shellcode/execute-shellcode-via-windows-callback-function.yml
+2 -2
View File
@@ -3,8 +3,8 @@ rule:
name: execute shellcode via Windows callback function
namespace: load-code/shellcode
authors:
- ervin.ocampo@mandiant.com
- jakub.jozwiak@mandiant.com
- "ervin.ocampo@mandiant.com"
- "jakub.jozwiak@mandiant.com"
description: Detect usage of various WinAPI functions that accept callback functions as parameters in order to execute arbitrary shellcode
scopes:
static: function