Commit Graph

10 Commits

Author SHA1 Message Date
mr-tz e18704545a fix call/thread scopes manually 2023-11-24 11:35:00 +01:00
mr-tz 784c9dca53 upgrade rules using updated script 2023-11-24 11:34:28 +01:00
Mike Hunhoff 2a37df98f5 adding new rules based on private Linux sample(s) (#821)
* adding new rules based on private Linux sample(s)

---------

Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2023-10-09 18:27:33 +02:00
Anushka Virgaonkar 95dc5eb27f Add new dotnet rules that capture capabilites typically found in backdoors. (#579) 2022-07-07 13:39:51 -06:00
Willi Ballenthin 88c9c786ca *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
Moritz Raabe 25938ca10c change to mandiant.com 2021-09-28 12:21:11 +02:00
Michael Hunhoff cab448c6f6 new rules and rule updates from B5F85C26D7AA5A1FB4AF5821B6B5AB9B 2020-12-31 08:44:23 -07:00
Desiree Beck c5d24c671a added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
William Ballenthin 7b4f4d10fb rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better 2020-06-21 17:54:01 -06:00
William Ballenthin 5f57dbdbc9 rules: reorganize rule names, namespaces, and ATT&CK mappings 2020-06-21 17:25:43 -06:00