admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,201 Commits 5 Branches 42 Tags
e5f56c84500372cf12ad06eeb841c3da1663be2a
Commit Graph

1201 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Moritz e5f56c8450 Update hash-data-with-crc32.yml 2022-06-24 09:44:12 +02:00
Mike Hunhoff 1fd82be168 Merge pull request #567 from mandiant/mr-tz-patch-1-1 
Update compiled-with-borland-delphi.yml
 2022-06-23 07:27:02 -06:00
Moritz 7c802af22f Update compiled-with-borland-delphi.yml 2022-06-23 14:29:02 +02:00
Willi Ballenthin b96b279d81 check-mutex: fix author 2022-06-06 13:17:54 -06:00
Willi Ballenthin 20c46c64c8 Merge pull request #562 from ryantxu1/master 
Update Mappings for MBC (part 8)
 2022-06-03 11:15:49 -06:00
ryan 92eef819bb Update Mappings for MBC (part 8) 2022-06-03 09:43:39 -05:00
Moritz c90bfeaba2 Merge pull request #561 from mandiant/mr-tz-patch-1 
Update changelog_author.py
 2022-06-01 14:12:46 +02:00
Moritz 7c46a34d65 Update changelog_author.py 2022-05-31 23:05:54 +02:00
Willi Ballenthin 1fee68e72e Merge pull request #560 from mandiant/meta-authors-everywhere 
*: use meta.authors everywhere
 2022-05-31 07:41:48 -06:00
Willi Ballenthin 88c9c786ca *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
Capa Bot eaa568abf6 Update rules number badge 2022-05-20 14:36:14 +00:00
Willi Ballenthin 5511f8a85b Merge pull request #558 from mandiant/add/get-os-info 
get OS information via KUSER_SHARED_DATA
 2022-05-20 08:35:57 -06:00
Moritz Raabe d2dbe99596 add file 2022-05-20 09:25:24 +02:00
Willi Ballenthin 52ff654ca0 Merge pull request #557 from idiom/master 
Update rules to use a list item instead of a string value for reference
 2022-05-11 10:33:51 -06:00
idiom d9dfb69125 Update references to define it as a list of related information. 2022-05-11 10:47:15 -04:00
idiom 49ac35dbe7 Update rules to use a list item instead of a string value for references. 2022-05-11 10:39:42 -04:00
William Ballenthin 6728fb0d5a Revert "call $+5 update rule and doc" 
This reverts commit c5368ed9a2.
 2022-04-27 06:28:04 -06:00
William Ballenthin d43a6ee544 Revert "Merge pull request #548 from mandiant/feature-remove-flavors" 
This reverts commit bc28847dd9, reversing
changes made to 82308c4109.
 2022-04-27 06:23:36 -06:00
William Ballenthin 3b72e490b3 Revert "Merge pull request #550 from mandiant/remove-dotnet-limitation-rule" 
This reverts commit adaffca201, reversing
changes made to bc28847dd9.
 2022-04-27 05:34:42 -06:00
William Ballenthin d4d28596bd Revert "Update rules number badge" 
This reverts commit 9967d225a6.
 2022-04-27 05:34:41 -06:00
William Ballenthin 056a6c2f28 Revert "Merge pull request #549 from mandiant/feature-doc-updates" 
This reverts commit afd356e046, reversing
changes made to 9967d225a6.
 2022-04-27 05:34:39 -06:00
William Ballenthin a2f11828f1 Revert "check mutex: fix moritz email address" 
This reverts commit cddf623c72.
 2022-04-27 05:34:38 -06:00
William Ballenthin 69cda2adb3 Revert "Merge pull request #547 from jtothej/huan" 
This reverts commit 87b4de536c, reversing
changes made to cddf623c72.
 2022-04-27 05:34:36 -06:00
William Ballenthin a7a9833b9b Revert "Update rules number badge" 
This reverts commit f8a03a3014.
 2022-04-27 05:34:33 -06:00
Capa Bot f8a03a3014 Update rules number badge 2022-04-07 07:50:28 +00:00
Moritz 87b4de536c Merge pull request #547 from jtothej/huan 
Adding packed-with-huan.yml
 2022-04-07 09:50:14 +02:00
Willi Ballenthin cddf623c72 check mutex: fix moritz email address 2022-04-06 13:26:37 -06:00
Willi Ballenthin afd356e046 Merge pull request #549 from mandiant/feature-doc-updates 
format: remove /x32 and /x64, add operand features
 2022-04-06 12:07:46 -06:00
Capa Bot 9967d225a6 Update rules number badge 2022-04-06 18:07:39 +00:00
Willi Ballenthin adaffca201 Merge pull request #550 from mandiant/remove-dotnet-limitation-rule 
Delete internal-dotnet-file-limitation.yml
 2022-04-06 12:07:24 -06:00
Moritz 98941e0e75 Delete internal-dotnet-file-limitation.yml 2022-04-06 20:04:05 +02:00
Willi Ballenthin 79f7012aa9 format: remove /x32 and /x64, add operand features 2022-04-06 11:39:55 -06:00
Willi Ballenthin bc28847dd9 Merge pull request #548 from mandiant/feature-remove-flavors 
remove /x32 and /x64 flavors and use instruction scope
 2022-04-06 11:03:33 -06:00
Willi Ballenthin ccf3f8fb5f luhn no lookup table: cleanup logic 2022-04-05 17:15:22 -06:00
Willi Ballenthin f1a3b78555 parse credit card info: update limit 2022-04-05 17:15:08 -06:00
Willi Ballenthin c14431d50d crc: fix logic 2022-04-05 15:18:33 -06:00
Willi Ballenthin da3ef38825 software breakpoints: document INT3 long form 2022-04-05 15:03:41 -06:00
Willi Ballenthin 202c60cd5a fix adler logic 2022-04-05 15:01:15 -06:00
Willi Ballenthin 904bf3ef00 *: remove /x32 and /x64 flavors and use instruction scope 2022-04-05 12:25:14 -06:00
Capa Bot 82308c4109 Update rules number badge 2022-03-24 09:43:10 +00:00
Moritz ae0864c7d9 Merge pull request #543 from jtothej/v-and-zig 
Adding compiled-with-v.yml and compiled-with-zig.yml
 2022-03-24 10:42:55 +01:00
jtothej 4c4d2dd5ed Adding packed-with-huan.yml 2022-03-24 16:24:50 +08:00
Moritz bc634e613b Merge pull request #546 from mandiant/new/20220323_ 
update enumerate-services
 2022-03-24 09:16:12 +01:00
Michael Hunhoff 58de40c15f update enumerate-services 2022-03-23 17:04:59 -06:00
Capa Bot 272abaf89c Update rules number badge 2022-03-23 17:56:39 +00:00
Mike Hunhoff 51de2eb818 Merge pull request #545 from mandiant/new/20222303 
adding get-process-image-filename
 2022-03-23 11:48:38 -06:00
Mike Hunhoff a458d0d70a Merge pull request #544 from mandiant/update/hijack-thread-execution 
update hijack-thread-execution.yml to match additional scenarios
 2022-03-23 11:48:24 -06:00
Michael Hunhoff dddf45baa9 adding get-process-image-filename 2022-03-23 11:34:36 -06:00
Michael Hunhoff 94f1639cb4 update hijack-thread-execution.yml to match additional scenarios 2022-03-23 09:01:25 -06:00
jtothej 9cc5be5ce4 Updated compiled-with-zig.yml - removed Windows specific logic 2022-03-22 10:44:36 +08:00