11 Commits

Author	SHA1	Message	Date
mike-hunhoff	eb8221d9ad	Merge pull request #305 from fireeye/enfore-string-format ... enforce string formatting	2021-03-25 12:36:51 -06:00
Michael Hunhoff	20e1b8fd4c	enforce string formatting with double quotes + escaped special characters	2021-03-24 14:14:38 -06:00
Moritz Raabe	6c9f83dd7f	merge duplicate rules	2021-03-22 18:42:54 +01:00
Andrew	12ff221b68	Add packaged-as-an-iexpress-self-extracting-archive	2021-03-21 22:25:21 -04:00
Michael Hunhoff	750e164a41	removing ntdll requirement from function features exported by both ntdll and ntoskrnl	2021-02-16 18:28:05 -07:00
Desiree Beck	5d285c5651	mappings for additions to namespaces	2021-01-21 15:29:06 -05:00
Desiree Beck	490bc34a05	add method to pe area	2020-10-19 14:01:02 -04:00
William Ballenthin	4350ffad33	fix rule paths thanks to linter	2020-07-23 11:58:23 -06:00
William Ballenthin	54cfb05bd0	rules: address comments in #14	2020-06-26 17:45:56 -06:00
William Ballenthin	7b4f4d10fb	rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better	2020-06-21 17:54:01 -06:00
William Ballenthin	5f57dbdbc9	rules: reorganize rule names, namespaces, and ATT&CK mappings	2020-06-21 17:25:43 -06:00