14 Commits

Author	SHA1	Message	Date
mr-tz	e18704545a	fix call/thread scopes manually	2023-11-24 11:35:00 +01:00
mr-tz	784c9dca53	upgrade rules using updated script	2023-11-24 11:34:28 +01:00
Mike Hunhoff	96a1abddca	new/update .NET rules (#625)	2022-10-07 09:39:57 -06:00
Anushka Virgaonkar	95dc5eb27f	Add new dotnet rules that capture capabilites typically found in backdoors. (#579)	2022-07-07 13:39:51 -06:00
Willi Ballenthin	88c9c786ca	*: use meta.authors everywhere	2022-05-26 11:56:31 -06:00
Moritz Raabe	25938ca10c	change to mandiant.com	2021-09-28 12:21:11 +02:00
William Ballenthin	6e501e8151	rules: convert inline comments to descriptions ... closes #1	2021-05-18 10:45:41 -06:00
William Ballenthin	f1b450edf0	update ATT&CK and MBC mappings ... thanks to Regina Elwell @ FireEye and @evandrix closes #316	2021-04-13 09:37:10 -06:00
Michael Hunhoff	20e1b8fd4c	enforce string formatting with double quotes + escaped special characters	2021-03-24 14:14:38 -06:00
Desiree Beck	33817fdd83	update micro objective name: data manipulation to data	2020-12-12 12:18:47 -05:00
Desiree Beck	a0f10b4cf2	add mappings	2020-10-19 14:04:15 -04:00
William Ballenthin	54cfb05bd0	rules: address comments in #14	2020-06-26 17:45:56 -06:00
William Ballenthin	7b4f4d10fb	rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better	2020-06-21 17:54:01 -06:00
William Ballenthin	5f57dbdbc9	rules: reorganize rule names, namespaces, and ATT&CK mappings	2020-06-21 17:25:43 -06:00