d33bc13fba
Merge branch 'master' of github.com:fireeye/capa-rules
2020-07-28 15:07:59 -06:00
0b04c942b3
graduate import public key
2020-07-28 15:07:48 -06:00
ff739c3246
Create encrypt-data-using-des-via-winapi.yml
2020-07-28 15:17:07 -04:00
b4e531a10b
Create encrypt-data-using-des.yml
2020-07-28 10:04:22 -04:00
4350ffad33
fix rule paths thanks to linter
2020-07-23 11:58:23 -06:00
f0085f2116
reduce FPs
2020-07-03 14:30:33 +02:00
25f1157db0
Change characteristic syntax in rules
...
Get rid of `true` in characteristic as it is implicit.
The changes are the result of executing the following commands:
```
find . -type f -exec sed -i.bak "s/\(.*\)characteristic(\(.*\)): true/\1characteristic: \2/g" {} \;
find . -name "*.bak" -type f -delete
```
2020-07-01 19:19:49 +02:00
e5db226844
fix rule reference
2020-06-29 12:26:09 -06:00
531eda1074
Fix 'unusual meta field' rule linter failure
...
Change the field `note` by a comment to fix the following failure:
```
FAIL: unusual meta field: Remove the meta field: "note"
```
2020-06-29 22:56:32 +02:00
54cfb05bd0
rules: address comments in #14
2020-06-26 17:45:56 -06:00
7b4f4d10fb
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
5f57dbdbc9
rules: reorganize rule names, namespaces, and ATT&CK mappings
2020-06-21 17:25:43 -06:00
William Ballenthin