Paul fa246a4a9b terminate process with RestartMgr.RmShutdown (#1077) ...

* terminate process with RestartMgr.RmShutdown

* fix 'and' to 'api'

2025-09-23 14:17:49 -06:00

..

create

add more APIs to remove use-process-replacement FNs (#1009)

2025-02-25 08:59:09 -07:00

dump

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

inject

remove FPs from allocate-or-change-rwx-memory.yml (#1027)

2025-03-18 08:01:36 -06:00

list

Improve Accuracy of Various Detections (#1010)

2025-03-10 14:19:23 -06:00

modify

new/updated rules from recent malware samples (#1063)

2025-08-12 10:21:05 -06:00

modules/list

use "span of calls" scope (#973)

2025-01-29 10:27:13 +01:00

terminate

terminate process with RestartMgr.RmShutdown (#1077)

2025-09-23 14:17:49 -06:00

get-process-filename.yml

get-process-filename.yml: added reference, corrected structure element

2024-10-18 19:09:05 +00:00

get-process-heap-flags.yml

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

get-process-heap-force-flags.yml

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

map-section-object.yml

use "span of calls" scope (#973)

2025-01-29 10:27:13 +01:00