Michael Hunhoff 20e1b8fd4c enforce string formatting with double quotes + escaped special characters

2021-03-24 14:14:38 -06:00

..

allocate-rwx-memory.yml

Improve injection detection and some refactoring of existing rules

2021-01-28 14:47:31 +01:00

allocate-user-process-rwx-memory.yml

rules: address comments in #14

2020-06-26 17:45:56 -06:00

attach-user-process-memory.yml

rules: address comments in #14

2020-06-26 17:45:56 -06:00

free-user-process-memory.yml

added mbc mappings in the host-interaction namespace

2020-12-16 15:30:06 -05:00

hijack-thread-execution.yml

Adjusts test file of hijack-thread-execution.yml, resolves conflict in inject-thread.yml and removes articles from rules

2021-01-28 15:28:53 +01:00

inject-apc.yml

removing ntdll requirement from function features exported by both ntdll and ntoskrnl

2021-02-16 18:28:05 -07:00

inject-dll.yml

capafmted rules

2021-01-28 17:26:25 +01:00

inject-pe.yml

capafmted rules

2021-01-28 17:26:25 +01:00

inject-thread.yml

capafmted rules

2021-01-28 17:26:25 +01:00

use-process-doppelganging.yml

enforce string formatting with double quotes + escaped special characters

2021-03-24 14:14:38 -06:00

use-process-replacement.yml

capafmted rules

2021-01-28 17:26:25 +01:00