Moritz Raabe
824bb5148a
find pusha popa sequences
2020-11-23 18:54:49 +01:00
re-fox
18d9c7668d
Update and rename validate-credit-card-number-using-luhn-algorithm-with-no-lookup-table.yml to validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml
2020-11-16 10:17:52 -05:00
re-fox
0e9cdd759c
Update and rename validate-credit-card-number-using-luhn-algorithm-with-lookup-table.yml to validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml
2020-11-16 10:17:19 -05:00
Moritz Raabe
33ae14eb53
use new description syntax
2020-09-30 17:48:02 +02:00
Moritz Raabe
1fcec06e7e
comment out description blocks for statements
...
discussed in #312
2020-09-14 11:53:01 +02:00
Michael Hunhoff
6ccc9a736f
fresh rules from al-khaser project
2020-08-13 09:39:42 -06:00
re-fox
39b0128967
Add files via upload
2020-08-10 12:13:39 -04:00
William Ballenthin
b878effef7
fix rules as documented in #49
2020-07-24 15:49:52 -06:00
Moritz Raabe
a8621978cf
change tight loop scope to function
2020-07-06 12:36:21 +02:00
Ana María Martínez Gómez
25f1157db0
Change characteristic syntax in rules
...
Get rid of `true` in characteristic as it is implicit.
The changes are the result of executing the following commands:
```
find . -type f -exec sed -i.bak "s/\(.*\)characteristic(\(.*\)): true/\1characteristic: \2/g" {} \;
find . -name "*.bak" -type f -delete
```
2020-07-01 19:19:49 +02:00
William Ballenthin
973cb6b1d2
lib rules: remove namespaces
2020-06-29 06:14:59 -06:00
William Ballenthin
54cfb05bd0
rules: address comments in #14
2020-06-26 17:45:56 -06:00
William Ballenthin
5f57dbdbc9
rules: reorganize rule names, namespaces, and ATT&CK mappings
2020-06-21 17:25:43 -06:00
William Ballenthin
c80380b8d6
rules: reformat with consistent lib and references order
2020-06-21 16:26:28 -06:00
William Ballenthin
e9ad899b0f
rules: add trailing newline to end of each file
2020-06-21 15:50:42 -06:00
William Ballenthin
69507875b0
rules: reformat all rules using capafmt
2020-06-21 15:47:02 -06:00
William Ballenthin
eaae0e89a7
import existing rules, forgetting about 938 prior commits
2020-06-18 07:27:35 -06:00