admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
ffdb07ca8ccd315907751dc9d3b6084a38e89f10
mandiant-capa-rules/host-interaction
T
History
Moritz e88db21de4 fix: rule logic (#592) 
* fix: rule logic

* fix: rule logic
2022-07-12 18:09:51 +02:00
..
bootloader
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
cli
Update with dotnet capabilities (#590)
2022-07-07 15:22:39 -06:00
clipboard
Add new dotnet rules that capture capabilites typically found in backdoors. (#579)
2022-07-07 13:39:51 -06:00
console
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
driver
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
environment-variable
dotnet rule updates (#566)
2022-06-28 15:16:24 -06:00
file-system
Add new dotnet rules that capture capabilites typically found in backdoors. (#579)
2022-07-07 13:39:51 -06:00
filter
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
firewall/modify
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
gui
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
hardware
fix: rule logic (#592)
2022-07-12 18:09:51 +02:00
log
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
mutex
Add new dotnet rules that capture capabilites typically found in backdoors. (#579)
2022-07-07 13:39:51 -06:00
network
Update with dotnet capabilities (#590)
2022-07-07 15:22:39 -06:00
os
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
2022-06-28 15:23:20 -06:00
process
fix: rule logic (#592)
2022-07-12 18:09:51 +02:00
recycle-bin
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
2022-06-28 15:23:20 -06:00
registry
Add new dotnet rules that capture capabilites typically found in backdoors. (#579)
2022-07-07 13:39:51 -06:00
service
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
session
Update with dotnet capabilities (#590)
2022-07-07 15:22:39 -06:00
software
Update get-installed-programs.yml (#584)
2022-07-05 09:52:52 +02:00
thread
Add new dotnet rules that capture capabilites typically found in backdoors. (#579)
2022-07-07 13:39:51 -06:00
uac/bypass
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
wmi
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00