Commit Graph

13 Commits

Author SHA1 Message Date
mr-tz 784c9dca53 upgrade rules using updated script 2023-11-24 11:34:28 +01:00
Willi Ballenthin 7685a232d9 forwarded export: fmt 2023-08-02 14:41:35 +02:00
Ronnie Salomonsen 65ab87b292 Update executable/pe/export/forwarded-export.yml
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
2023-07-19 14:54:12 +02:00
Ronnie Salomonsen a8d00309c3 Add new rule for forwarded exports and update doc to with new characteristic and examples under export feature 2023-07-19 12:40:20 +02:00
Moritz 915c1f5e07 remove very common .rsrc section rule (#761)
* remove very common rule
2023-05-26 10:34:25 +02:00
Willi Ballenthin 88c9c786ca *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
Moritz Raabe 25938ca10c change to mandiant.com 2021-09-28 12:21:11 +02:00
Moritz Raabe 6c9f83dd7f merge duplicate rules 2021-03-22 18:42:54 +01:00
Desiree Beck 490bc34a05 add method to pe area 2020-10-19 14:01:02 -04:00
William Ballenthin 4350ffad33 fix rule paths thanks to linter 2020-07-23 11:58:23 -06:00
William Ballenthin 54cfb05bd0 rules: address comments in #14 2020-06-26 17:45:56 -06:00
William Ballenthin 7b4f4d10fb rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better 2020-06-21 17:54:01 -06:00
William Ballenthin 5f57dbdbc9 rules: reorganize rule names, namespaces, and ATT&CK mappings 2020-06-21 17:25:43 -06:00