11 Commits

Author SHA1 Message Date
Still / Azaka 16492182a3 Add .NET AoT & TouchSocket linking detection (#948)
* Add initial two rules

Signed-off-by: Still Hsu <dev@stillu.cc>

* Swap sample for a smaller custom compiled one

Signed-off-by: Still Hsu <dev@stillu.cc>

---------

Signed-off-by: Still Hsu <dev@stillu.cc>
2024-11-28 11:33:53 +01:00
mr-tz 784c9dca53 upgrade rules using updated script 2023-11-24 11:34:28 +01:00
Willi Ballenthin e0fdd2cc30 rename rule 2023-01-03 09:35:15 +01:00
Willi Ballenthin bdd33bdf39 add dotnet-hook-module 2023-01-03 09:25:30 +01:00
Moritz e88db21de4 fix: rule logic (#592)
* fix: rule logic

* fix: rule logic
2022-07-12 18:09:51 +02:00
Willi Ballenthin d62ed7f2d9 rename .NET rule paths 2022-06-28 11:08:54 -06:00
Willi Ballenthin 88c9c786ca *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
Moritz Raabe 25938ca10c change to mandiant.com 2021-09-28 12:21:11 +02:00
William Ballenthin 4350ffad33 fix rule paths thanks to linter 2020-07-23 11:58:23 -06:00
William Ballenthin 7b4f4d10fb rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better 2020-06-21 17:54:01 -06:00
William Ballenthin 5f57dbdbc9 rules: reorganize rule names, namespaces, and ATT&CK mappings 2020-06-21 17:25:43 -06:00