diff --git a/load-code/pe/rebuild-import-table.yml b/load-code/pe/rebuild-import-table.yml index 579bd0a4..9c8fc53c 100644 --- a/load-code/pe/rebuild-import-table.yml +++ b/load-code/pe/rebuild-import-table.yml @@ -5,7 +5,7 @@ rule: author: "@Ana06" scope: function mbc: - - Data::Code::Rebuild Import Table [C0062.004] + - Defense Evasion::Hijack Execution Flow::Import Address Table (IAT) Hooking [F0005.m03] references: - https://0x00sec.org/t/reflective-dll-injection/3080 - https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection