admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
cdfb01762b8ba7acd2b954d355212e95ae0622e2
mandiant-capa-rules/host-interaction
T
History
mr-tz 64d3a359d3 fix example function address
2023-08-19 11:27:55 +02:00
..
bootloader
Add get-uefi-variable.yml and set-uefi-variable.yml
2023-08-02 18:21:12 +08:00
cli
Update Mappings for MBC (part 10) (#674)
2023-02-01 10:09:34 +01:00
clipboard
tighten scope and add optional loop match
2023-06-12 14:16:41 +02:00
console
add new and update existing .NET rules (#639)
2023-01-03 07:58:11 -07:00
driver
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
environment-variable
Update Mappings for MBC (part 10) (#674)
2023-02-01 10:09:34 +01:00
file-system
graduate get windows directory from kuser_shared data
2023-07-13 04:10:07 +02:00
filter
Create enumerate-minifilter-drivers.yml
2023-06-25 13:50:43 +03:00
firewall/modify
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
gui
Update switch-active-desktop.yml and move to host-interaction/gui
2023-07-06 21:21:07 +08:00
hardware
add rule
2023-06-16 16:32:08 +02:00
log
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
memory
Add create-new-application-domain-in-dotnet.yml
2023-07-05 18:51:38 +08:00
mutex
Adjusted rules for the ELF BEACON sample shared by Intezer (#654)
2023-01-09 14:37:51 +01:00
network
DNS and crypto rule tweaks (#713)
2023-02-27 09:59:21 +01:00
os
Update Mappings for MBC (part 10) (#674)
2023-02-01 10:09:34 +01:00
process
fix example function address
2023-08-19 11:27:55 +02:00
recycle-bin
update ATT&CK/MBC meta data (#675)
2023-02-01 10:08:58 +01:00
registry
improve .NET detections for registry access and web proxy usage (#723)
2023-03-14 10:25:17 -06:00
service
Merge pull request #777 from mandiant/rules52-25
2023-07-08 09:53:00 +02:00
session
Add dotnet rules having property features (#601)
2022-10-03 09:28:05 -06:00
software
Update get-installed-programs.yml (#584)
2022-07-05 09:52:52 +02:00
thread
new/update rules using .NET ctor method (#626)
2022-10-13 08:36:31 -06:00
uac/bypass
Add initial UAC bypass with RPC rule
2022-09-20 13:59:49 +01:00
wmi
Rules 2023 01 (#644)
2023-01-04 17:59:08 +01:00