1260 Commits

Author SHA1 Message Date
Capa Bot 14953f80c1 Update rules number badge v3.2.1 2022-07-06 19:36:11 +00:00
re-fox 52b0a9a152 Create hash-data-using-aphash.yml (#587)
* Create hash-data-using-aphash.yar

* Rename hash-data-using-aphash.yar to hash-data-using-aphash.yml
2022-07-06 21:35:56 +02:00
Capa Bot c4ca94dd32 Update rules number badge 2022-07-05 15:36:57 +00:00
Moritz 9524b011f6 Merge pull request #586 from mandiant/new/20220418
add power-down-monitor.yml, update read-process-memory.yml
2022-07-05 17:36:37 +02:00
Michael Hunhoff 59b881c006 add power-down-monitor.yml, update read-process-memory.yml 2022-07-05 08:44:29 -06:00
Moritz 020a0763af Update get-installed-programs.yml (#584) 2022-07-05 09:52:52 +02:00
Moritz 489068bb96 ci: lint thorough on PR text (#581)
* ci: lint thorough on PR text

* ci: document thorough lint option
2022-07-05 09:09:05 +02:00
Willi Ballenthin c669a778ab Merge pull request #582 from re-fox/master
Graduate get-installed-programs.yml
2022-07-01 10:15:31 -06:00
re-fox 4383e9aa5b Graduate get-installed-programs.yml 2022-07-01 11:14:28 -04:00
Willi Ballenthin 1bdaa1123f Merge pull request #580 from mandiant/mr-tz-patch-1
Update format.md
2022-07-01 08:49:57 -06:00
Moritz 2b33378f9e Update format.md 2022-07-01 12:17:24 +02:00
Capa Bot 13a765ce4e Update rules number badge 2022-06-30 15:17:09 +00:00
Willi Ballenthin 30ef9dab3a Merge pull request #578 from re-fox/master
Create gather-chrome-based-browser-login-information.yml
2022-06-30 09:16:52 -06:00
re-fox c7920113f0 Create gather-chrome-based-browser-login-information.yml 2022-06-30 10:56:52 -04:00
Capa Bot 4fa1440db9 Update rules number badge 2022-06-29 23:21:43 +00:00
Willi Ballenthin 9a4346872c Merge pull request #577 from re-fox/master
Create capture-screenshot-via-keybd-event.yml
2022-06-29 17:21:28 -06:00
re-fox 683a5a581b Update collection/screenshot/capture-screenshot-via-keybd-event.yml
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2022-06-29 14:02:01 -04:00
Capa Bot 64464a61bd Update rules number badge 2022-06-29 17:54:55 +00:00
Anushka Virgaonkar 2465adcf1c Add execute .NET assembly rules (#576) 2022-06-29 11:54:41 -06:00
Mike Hunhoff 5f7e1fb514 update documentation for .NET (#574) 2022-06-29 11:54:04 -06:00
re-fox ac1dd7032a Create capture-screenshot-via-keybd-event.yml 2022-06-29 12:49:28 -04:00
Capa Bot d2ad3a045a Update rules number badge 2022-06-28 21:33:36 +00:00
Willi Ballenthin b65b9e80c9 Merge pull request #575 from mandiant/revert-revert-v4
Revert revert v4 breaking changes
2022-06-28 15:33:21 -06:00
Willi Ballenthin 9083a1950c linter 2022-06-28 15:30:57 -06:00
Willi Ballenthin 75f1602591 Revert "Revert "Update rules number badge""
This reverts commit a7a9833b9b.
2022-06-28 15:27:19 -06:00
Willi Ballenthin 384e34f392 Revert "Revert "Merge pull request #547 from jtothej/huan""
This reverts commit 69cda2adb3.
2022-06-28 15:26:48 -06:00
Willi Ballenthin c30c842433 Revert "Revert "check mutex: fix moritz email address""
This reverts commit a2f11828f1.
2022-06-28 15:26:39 -06:00
Willi Ballenthin f5e83ce953 Revert "Revert "Merge pull request #549 from mandiant/feature-doc-updates""
This reverts commit 056a6c2f28.
2022-06-28 15:26:03 -06:00
Willi Ballenthin 3f77108744 Revert "Revert "Update rules number badge""
This reverts commit d4d28596bd.
2022-06-28 15:25:44 -06:00
Willi Ballenthin 57e1732f5c Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
This reverts commit d43a6ee544.
2022-06-28 15:23:20 -06:00
Willi Ballenthin d5c2709049 Revert "Revert "call $+5 update rule and doc""
This reverts commit 6728fb0d5a.
2022-06-28 15:20:15 -06:00
Capa Bot f26770580a Update rules number badge 2022-06-28 21:16:35 +00:00
Mike Hunhoff d4af075660 dotnet rule updates (#566) 2022-06-28 15:16:24 -06:00
Capa Bot c5a50a0489 Update rules number badge 2022-06-28 20:26:32 +00:00
Willi Ballenthin 7011634b0c Merge pull request #553 from sara-rn/master
added parse-pe-export-data rule
2022-06-28 14:26:17 -06:00
Willi Ballenthin 504a94444e resolve-function-by-parsing-pe-exports: fix linter suggestions 2022-06-28 14:25:11 -06:00
Capa Bot 991e64c627 Update rules number badge 2022-06-28 20:10:19 +00:00
Willi Ballenthin aa95d7acc1 Rename parse-pe-export-data.yml to resolve-function-by-parsing-PE-exports.yml 2022-06-28 14:10:17 -06:00
Willi Ballenthin 81365f45e7 Update nursery/parse-pe-export-data.yml
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2022-06-28 14:09:36 -06:00
Willi Ballenthin 590f4ae1f1 Update nursery/parse-pe-export-data.yml 2022-06-28 14:09:20 -06:00
Willi Ballenthin c6615a518d Merge pull request #564 from mandiant/existing-dn-rules
use new .NET features for existing .NET rules
2022-06-28 14:07:31 -06:00
Willi Ballenthin 3fc7309b5c Merge branch 'master' into existing-dn-rules 2022-06-28 14:06:51 -06:00
Willi Ballenthin 0241d20ff3 Merge pull request #568 from anushkavirgaonkar/master
Add load-dotnet-assembly.yml
2022-06-28 14:06:24 -06:00
Willi Ballenthin 3fff4d84cc Merge pull request #565 from mandiant/add-dn-features
*: add APIs used by .NET samples for basic interactions
2022-06-28 14:04:18 -06:00
Capa Bot aa6b2fda3d Update rules number badge 2022-06-28 20:03:51 +00:00
Willi Ballenthin b07353b608 Merge pull request #563 from mandiant/rm-dotnet-limitation
rules: remove .NET file limitation
2022-06-28 14:03:37 -06:00
Anushka Virgaonkar 72be149113 Update nursery/load-dotnet-assembly.yml
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2022-06-28 10:48:29 -07:00
Willi Ballenthin cb28b9b8be Merge pull request #573 from mandiant/fix-rename-dotnet-rules
rename .NET rule paths
2022-06-28 11:09:51 -06:00
Willi Ballenthin d62ed7f2d9 rename .NET rule paths 2022-06-28 11:08:54 -06:00
Willi Ballenthin 58ee49dd13 Merge pull request #571 from mandiant/mr-tz-patch-1
Update reference-google-public-dns-server.yml
2022-06-28 10:33:26 -06:00