Moritz Raabe 77b737fcf0 rule tweaks based on PMA Lab 03-02.dll ...

see #296

2021-03-22 19:05:08 +01:00

..

create

rule tweaks based on PMA Lab 03-02.dll

2021-03-22 19:05:08 +01:00

inject

removing ntdll requirement from function features exported by both ntdll and ntoskrnl

2021-02-16 18:28:05 -07:00

list

removing ntdll requirement from function features exported by both ntdll and ntoskrnl

2021-02-16 18:28:05 -07:00

modify

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

2020-06-21 17:54:01 -06:00

modules/list

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

2020-06-21 17:54:01 -06:00

terminate

added mbc mappings in the host-interaction namespace

2020-12-16 15:30:06 -05:00

allocate-thread-local-storage.yml

update based on comments

2020-12-16 16:33:22 -05:00

get-process-heap-flags.yml

PR changes additional

2020-08-27 09:45:06 -06:00

get-process-heap-force-flags.yml

PR changes additional

2020-08-27 09:45:06 -06:00

set-thread-local-storage-value.yml

update based on comments

2020-12-16 16:33:22 -05:00