admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
mandiant-capa-rules/load-code
T
History
Saniya Fatima 9609e19ddb Powershell expression (#1118) 
* Fix: Reduce the false positive in Powershell expression

* Enhance powershell execution detection
2026-02-23 13:51:19 -07:00
..
dotnet
Add rules for detecting donut-related features (#997)
2025-03-21 10:15:28 -06:00
pe
use "span of calls" scope (#973)
2025-01-29 10:27:13 +01:00
powershell
Powershell expression (#1118)
2026-02-23 13:51:19 -07:00
shellcode
Add RtlRegisterWait API to shellcode exec callback (#1094)
2025-12-29 10:20:58 -07:00
execute-jscript-via-vsaengine-in-dotnet.yml
Add rule execute-jscript-via-vsaengine-in-dotnet.yml (#1071)
2025-08-25 13:07:56 -06:00
execute-vbscript-javascript-or-jscript-in-memory.yml
upgrade rules using updated script
2023-11-24 11:34:28 +01:00