Andrew
|
12ff221b68
|
Add packaged-as-an-iexpress-self-extracting-archive
|
2021-03-21 22:25:21 -04:00 |
|
Michael Hunhoff
|
750e164a41
|
removing ntdll requirement from function features exported by both ntdll and ntoskrnl
|
2021-02-16 18:28:05 -07:00 |
|
Desiree Beck
|
5d285c5651
|
mappings for additions to namespaces
|
2021-01-21 15:29:06 -05:00 |
|
Desiree Beck
|
490bc34a05
|
add method to pe area
|
2020-10-19 14:01:02 -04:00 |
|
William Ballenthin
|
4350ffad33
|
fix rule paths thanks to linter
|
2020-07-23 11:58:23 -06:00 |
|
William Ballenthin
|
54cfb05bd0
|
rules: address comments in #14
|
2020-06-26 17:45:56 -06:00 |
|
William Ballenthin
|
7b4f4d10fb
|
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
|
2020-06-21 17:54:01 -06:00 |
|
William Ballenthin
|
5f57dbdbc9
|
rules: reorganize rule names, namespaces, and ATT&CK mappings
|
2020-06-21 17:25:43 -06:00 |
|