Merge pull request #563 from mandiant/rm-dotnet-limitation

rules: remove .NET file limitation
This commit is contained in:
Willi Ballenthin
2022-06-28 14:03:37 -06:00
committed by GitHub
@@ -1,21 +0,0 @@
rule:
meta:
name: (internal) dotnet file limitation
# capa won't detect much in .NET samples.
# it might match some file-level things.
# for consistency, bail on things that we don't support.
namespace: internal/limitation/file
authors:
- william.ballenthin@mandiant.com
description: |
This sample appears to be a .NET module.
.NET is a cross-platform framework for running managed applications.
capa cannot handle non-native files. This means that the results may be misleading or incomplete.
You may have to analyze the file manually, using a tool like the .NET decompiler dnSpy.
scope: file
examples:
- b9f5bd514485fb06da39beff051b9fdc
features:
- or:
- match: runtime/dotnet