mirror of
https://github.com/mandiant/capa-rules
synced 2026-06-08 15:41:20 +00:00
fix author quoting
This commit is contained in:
@@ -3,8 +3,8 @@ rule:
|
||||
name: execute shellcode via Windows callback function
|
||||
namespace: load-code/shellcode
|
||||
authors:
|
||||
- "ervin.ocampo@mandiant.com"
|
||||
- "jakub.jozwiak@mandiant.com"
|
||||
- ervin.ocampo@mandiant.com
|
||||
- jakub.jozwiak@mandiant.com
|
||||
description: Detect usage of various WinAPI functions that accept callback functions as parameters in order to execute arbitrary shellcode
|
||||
scopes:
|
||||
static: function
|
||||
|
||||
Reference in New Issue
Block a user