From bdf76e6e192a7fe1044ac04fba6033d2998b98a0 Mon Sep 17 00:00:00 2001 From: Willi Ballenthin Date: Mon, 6 Jun 2022 15:16:23 -0600 Subject: [PATCH] rules: remove .NET file limitation --- .../file/internal-dotnet-file-limitation.yml | 21 ------------------- 1 file changed, 21 deletions(-) delete mode 100644 internal/limitation/file/internal-dotnet-file-limitation.yml diff --git a/internal/limitation/file/internal-dotnet-file-limitation.yml b/internal/limitation/file/internal-dotnet-file-limitation.yml deleted file mode 100644 index a0bc4124..00000000 --- a/internal/limitation/file/internal-dotnet-file-limitation.yml +++ /dev/null @@ -1,21 +0,0 @@ -rule: - meta: - name: (internal) dotnet file limitation - # capa won't detect much in .NET samples. - # it might match some file-level things. - # for consistency, bail on things that we don't support. - namespace: internal/limitation/file - authors: - - william.ballenthin@mandiant.com - description: | - This sample appears to be a .NET module. - - .NET is a cross-platform framework for running managed applications. - capa cannot handle non-native files. This means that the results may be misleading or incomplete. - You may have to analyze the file manually, using a tool like the .NET decompiler dnSpy. - scope: file - examples: - - b9f5bd514485fb06da39beff051b9fdc - features: - - or: - - match: runtime/dotnet