admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix improper scope for rules containing a subscope in and

Browse Source
This commit is contained in:
Yacine Elhamer
2023-08-21 14:27:45 +02:00
parent a55d769da8
commit c4cdd9bae7
257 changed files with 298 additions and 848 deletions
Download Patch File Download Diff File Expand all files Collapse all files
load-code/shellcode/execute-shellcode-via-windows-callback-function.yml
-1
View File
@@ -8,7 +8,6 @@ rule:
description: Detect usage of various WinAPI functions that accept callback functions as parameters in order to execute arbitrary shellcode
scopes:
static: function
dynamic: process
att&ck:
- Defense Evasion::Reflective Code Loading [T1620]
mbc: