Commit Graph

8 Commits

Author SHA1 Message Date
Andrew 12ff221b68 Add packaged-as-an-iexpress-self-extracting-archive 2021-03-21 22:25:21 -04:00
Michael Hunhoff 750e164a41 removing ntdll requirement from function features exported by both ntdll and ntoskrnl 2021-02-16 18:28:05 -07:00
Desiree Beck 5d285c5651 mappings for additions to namespaces 2021-01-21 15:29:06 -05:00
Desiree Beck 490bc34a05 add method to pe area 2020-10-19 14:01:02 -04:00
William Ballenthin 4350ffad33 fix rule paths thanks to linter 2020-07-23 11:58:23 -06:00
William Ballenthin 54cfb05bd0 rules: address comments in #14 2020-06-26 17:45:56 -06:00
William Ballenthin 7b4f4d10fb rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better 2020-06-21 17:54:01 -06:00
William Ballenthin 5f57dbdbc9 rules: reorganize rule names, namespaces, and ATT&CK mappings 2020-06-21 17:25:43 -06:00