mandiant-capa-rules

mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00

Files

T

Still / Azaka 037ca83cb3 Improve browser stealer & add SQLite lib detection (#757 )

* Improve regex for existing browser data gathering detection

- Fix erroneous regex capture
+ Add detections for cookies gathering
+ Add generic browser detection (some webkit browser for some reason uses the same chromium-based paths?)

Signed-off-by: Still Hsu <dev@stillu.cc>

* Add rudimentary sqlite db libs detection
- Typically used along with browser data collection

Signed-off-by: Still Hsu <dev@stillu.cc>

---------

Signed-off-by: Still Hsu <dev@stillu.cc>

2023-08-19 11:36:10 +02:00

browser

Improve browser stealer & add SQLite lib detection (#757 )

2023-08-19 11:36:10 +02:00

credit-card

Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""

2022-06-28 15:23:20 -06:00

database

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

file-managers

*: use meta.authors everywhere