rule updates

data-manipulation/encryption/camellia/encrypt-data-using-camellia.yml

@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt-data-using-camellia
+    name: encrypt data using camellia
     namespace: data-manipulation/encryption/camellia
     author: '@_re_fox'
     scope: basic block

data-manipulation/encryption/hc-128/encrypt-data-using-hc-128.yml

@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt-data-using-hc-128
+    name: encrypt data using hc 128
     namespace: data-manipulation/encryption/hc-128
     author: '@recvfrom'
     description: Looks for instruction mnemonics associated with initialization of the HC-128 stream cipher

data-manipulation/encryption/sosemanuk/encrypt-data-using-sosemanuk.yml

@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt-data-using-sosemanuk
+    name: encrypt data using sosemanuk
     namespace: data-manipulation/encryption/sosemanuk
     author: '@recvfrom'
     description: Looks for cryptographic constants associated with the Sosemanuk stream cipher

host-interaction/thread/create/create-thread.yml

@@ -20,6 +20,7 @@ rule:
       - api: SHCreateThread
       - api: SHCreateThreadWithHandle
       - api: kernel32.CreateRemoteThread
+      - api: kernel32.CreateRemoteThreadEx
       - api: ntdll.RtlCreateUserThread
       - api: ntdll.NtCreateThread
       - api: ntdll.NtCreateThreadEx