change to mandiant.com

executable/pe/pdb/contains-pdb-path.yml

@@ -2,7 +2,7 @@ rule:
   meta:
     name: contains PDB path
     namespace: executable/pe/pdb
-    author: moritz.raabe@fireeye.com
+    author: moritz.raabe@mandiant.com
     scope: file
     examples:
       - 464EF2CA59782CE697BC329713698CCC  # level32.exe

executable/pe/section/rsrc/contain-a-resource-rsrc-section.yml

@@ -2,7 +2,7 @@ rule:
   meta:
     name: contain a resource (.rsrc) section
     namespace: executable/pe/section/rsrc
-    author: moritz.raabe@fireeye.com
+    author: moritz.raabe@mandiant.com
     scope: file
     examples:
       - A933A1A402775CFA94B6BEE0963F4B46:0x41fd25

executable/pe/section/tls/contain-a-thread-local-storage-tls-section.yml

@@ -2,7 +2,7 @@ rule:
   meta:
     name: contain a thread local storage (.tls) section
     namespace: executable/pe/section/tls
-    author: michael.hunhoff@fireeye.com
+    author: michael.hunhoff@mandiant.com
     scope: file
     examples:
       - Practical Malware Analysis Lab 16-02.exe_

executable/resource/extract-resource-via-kernel32-functions.yml

@@ -2,7 +2,7 @@ rule:
   meta:
     name: extract resource via kernel32 functions
     namespace: executable/resource
-    author: william.ballenthin@fireeye.com
+    author: william.ballenthin@mandiant.com
     scope: function
     examples:
       - BF88E1BD4A3BDE10B419A622278F1FF7:0x401000

executable/subfile/pe/contain-an-embedded-pe-file.yml

@@ -2,7 +2,7 @@ rule:
   meta:
     name: contain an embedded PE file
     namespace: executable/subfile/pe
-    author: moritz.raabe@fireeye.com
+    author: moritz.raabe@mandiant.com
     scope: file
     mbc:
       - Execution::Install Additional Program [B0023]