vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

added mbc mapping in impact namespace

Browse source
This commit is contained in:
Desiree Beck 2020-12-16 15:34:52 -05:00
parent c5d24c671a
commit 4e884a3e76
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
impact/inhibit-system-recovery/delete-volume-shadow-copies.yml
View file

@ -6,6 +6,8 @@ rule:
scope: function
att&ck:
- Impact::Inhibit System Recovery [T1490]
mbc:
- Impact::Disk Content Wipe::Delete Shadow Drive [F0014.001]
examples:
- B87E9DD18A5533A09D3E48A7A1EFBCF6:0x140006AF0
features: