Still / Azaka
16492182a3
Add .NET AoT & TouchSocket linking detection ( #948 )
...
* Add initial two rules
Signed-off-by: Still Hsu <dev@stillu.cc >
* Swap sample for a smaller custom compiled one
Signed-off-by: Still Hsu <dev@stillu.cc >
---------
Signed-off-by: Still Hsu <dev@stillu.cc >
2024-11-28 11:33:53 +01:00
mr-tz
784c9dca53
upgrade rules using updated script
2023-11-24 11:34:28 +01:00
Willi Ballenthin
e0fdd2cc30
rename rule
2023-01-03 09:35:15 +01:00
Willi Ballenthin
bdd33bdf39
add dotnet-hook-module
2023-01-03 09:25:30 +01:00
Moritz
e88db21de4
fix: rule logic ( #592 )
...
* fix: rule logic
* fix: rule logic
2022-07-12 18:09:51 +02:00
Willi Ballenthin
d62ed7f2d9
rename .NET rule paths
2022-06-28 11:08:54 -06:00
Willi Ballenthin
88c9c786ca
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
Moritz Raabe
25938ca10c
change to mandiant.com
2021-09-28 12:21:11 +02:00
William Ballenthin
4350ffad33
fix rule paths thanks to linter
2020-07-23 11:58:23 -06:00
William Ballenthin
7b4f4d10fb
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
William Ballenthin
5f57dbdbc9
rules: reorganize rule names, namespaces, and ATT&CK mappings
2020-06-21 17:25:43 -06:00