Yacine Elhamer
|
d20a7e0a48
|
add elaborative comment
|
2023-08-29 21:32:37 +02:00 |
|
Yacine Elhamer
|
d5f05f4e88
|
initial commit
|
2023-08-29 21:23:55 +02:00 |
|
Yacine Elhamer
|
5b73ddcd24
|
manual pass
|
2023-08-22 09:40:13 +02:00 |
|
Yacine Elhamer
|
a55d769da8
|
fix author quoting
|
2023-08-21 09:10:33 +02:00 |
|
Yacine Elhamer
|
8d851f3343
|
updated rules
|
2023-08-20 15:39:29 +02:00 |
|
Yacine Elhamer
|
850909bd82
|
update
|
2023-08-17 11:07:02 +02:00 |
|
Yacine Elhamer
|
e937af1ee6
|
initial commit
|
2023-08-17 10:41:11 +02:00 |
|
Willi Ballenthin
|
7685a232d9
|
forwarded export: fmt
|
2023-08-02 14:41:35 +02:00 |
|
Ronnie Salomonsen
|
65ab87b292
|
Update executable/pe/export/forwarded-export.yml
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
|
2023-07-19 14:54:12 +02:00 |
|
Ronnie Salomonsen
|
a8d00309c3
|
Add new rule for forwarded exports and update doc to with new characteristic and examples under export feature
|
2023-07-19 12:40:20 +02:00 |
|
Moritz
|
915c1f5e07
|
remove very common .rsrc section rule (#761)
* remove very common rule
|
2023-05-26 10:34:25 +02:00 |
|
Willi Ballenthin
|
88c9c786ca
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
Moritz Raabe
|
25938ca10c
|
change to mandiant.com
|
2021-09-28 12:21:11 +02:00 |
|
Moritz Raabe
|
6c9f83dd7f
|
merge duplicate rules
|
2021-03-22 18:42:54 +01:00 |
|
Desiree Beck
|
490bc34a05
|
add method to pe area
|
2020-10-19 14:01:02 -04:00 |
|
William Ballenthin
|
4350ffad33
|
fix rule paths thanks to linter
|
2020-07-23 11:58:23 -06:00 |
|
William Ballenthin
|
54cfb05bd0
|
rules: address comments in #14
|
2020-06-26 17:45:56 -06:00 |
|
William Ballenthin
|
7b4f4d10fb
|
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
|
2020-06-21 17:54:01 -06:00 |
|
William Ballenthin
|
5f57dbdbc9
|
rules: reorganize rule names, namespaces, and ATT&CK mappings
|
2020-06-21 17:25:43 -06:00 |
|