vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

reverting changes

Browse source
This commit is contained in:
dhruvak001 2025-02-03 23:28:19 +05:30 • committed by Willi Ballenthin
parent fe99a653e8
commit 13b6bc0dfe
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml
View file

@ -6,7 +6,7 @@ rule:
- michael.hunhoff@mandiant.com
scopes:
static: function
dynamic: thread
dynamic: span of calls
mbc:
- Defense Evasion::Disable or Evade Security Tools::Bypass Windows File Protection [F0004.007]
examples: