JJ fa61e110ad Update and add Cabinet archive related rules (#808) ...

* Update and add Cabinet archive related rules

2023-11-29 14:27:45 +01:00

..

allocate-memory.yml

Update allocate-memory.yml

2023-10-11 12:08:01 +02:00

allocate-or-change-rw-memory.yml

rename rules

2023-10-11 11:17:13 +02:00

calculate-modulo-256-via-x86-assembly.yml

Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""

2022-06-28 15:23:20 -06:00

change-memory-protection.yml

add runtime resolved functions

2023-10-11 11:54:50 +02:00

contain-loop.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

contain-pusha-popa-sequence.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

create-file-compression-interface-context-on-windows.yml

Update and add Cabinet archive related rules (#808)

2023-11-29 14:27:45 +01:00

create-file-decompression-interface-context-on-windows.yml

Update and add Cabinet archive related rules (#808)

2023-11-29 14:27:45 +01:00

create-or-open-file.yml

add LZ* functions

2023-06-04 12:16:30 +02:00

create-or-open-registry-key.yml

improve rules that often match (#655)

2023-01-09 14:07:53 +01:00

create-or-open-section-object.yml

add section access/map rules (#681)

2023-02-02 09:11:46 +01:00

delay-execution.yml

Adjusted rules for the ELF BEACON sample shared by Intezer (#654)

2023-01-09 14:37:51 +01:00

duplicate-stdin-and-stdout.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

get-os-version.yml

Update get-os-version.yml

2023-07-22 19:33:09 +08:00

get-service-handle.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

open-process.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

open-thread.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

peb-access.yml

Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""

2022-06-28 15:23:20 -06:00

validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml

Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""

2022-06-28 15:23:20 -06:00

validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml

Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""

2022-06-28 15:23:20 -06:00

write-process-memory.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00