admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
b5bb713431e73207ad3fed86355eba95f7a4c1e2
mandiant-capa-rules/host-interaction
T
History
William Ballenthin b5bb713431 manipulate console: use twos complement
2020-10-20 15:02:49 -06:00
..
cli
Update resolve-path-using-msvcrt.yml
2020-09-01 13:47:00 -04:00
clipboard
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
console
manipulate console: use twos complement
2020-10-20 15:02:49 -06:00
driver
merge
2020-06-26 17:47:37 -06:00
environment-variable
Update query-environment-variable.yml
2020-08-31 16:12:34 -04:00
file-system
adding new rules for sample with MD5 hash 03B236B23B1EC37C663527C1F53AF3FE
2020-07-30 17:33:13 -06:00
firewall/modify
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
gui
Create references-logon-banner.yml
2020-09-17 11:02:37 -04:00
hardware
PR changes additional
2020-08-27 09:45:06 -06:00
log/debug/write-event
rules: address comments in #14
2020-06-26 17:45:56 -06:00
mutex
add new rules
2020-08-27 10:38:59 +02:00
network
Fix #115
2020-09-02 12:17:01 -04:00
os
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
process
Create terminate-process-via-fastfail.yml
2020-10-05 12:14:27 -04:00
registry
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
service
fix rules as documented in #49
2020-07-24 15:49:52 -06:00
session
adding new rules for sample with MD5 hash 03B236B23B1EC37C663527C1F53AF3FE
2020-07-30 17:33:13 -06:00
thread
adding new rules to nursery, updating create-thread.yml
2020-09-17 13:35:41 -06:00
uac/bypass
fix linter suggestions
2020-08-29 21:49:50 -06:00