From 52bbc8d6988bcd1eb7d9b010e98fbfe62eb40caa Mon Sep 17 00:00:00 2001 From: Mike Hunhoff Date: Wed, 15 Feb 2023 08:16:05 -0700 Subject: [PATCH] adding "packaged as single-file .NET application" (#699) * adding "packaged as single-file .NET application" Co-authored-by: Willi Ballenthin * add sample binary, move from nursery --- ...aged-as-single-file-dotnet-application.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 executable/installer/dotnet/packaged-as-single-file-dotnet-application.yml diff --git a/executable/installer/dotnet/packaged-as-single-file-dotnet-application.yml b/executable/installer/dotnet/packaged-as-single-file-dotnet-application.yml new file mode 100644 index 00000000..999ef224 --- /dev/null +++ b/executable/installer/dotnet/packaged-as-single-file-dotnet-application.yml @@ -0,0 +1,19 @@ +rule: + meta: + name: packaged as single-file .NET application + namespace: executable/installer/dotnet + authors: + - michael.hunhoff@mandiant.com + description: Single binary containing target .NET application and all application-dependent files + scope: file + references: + - https://learn.microsoft.com/en-us/dotnet/core/deploying/single-file/overview?tabs=cli + examples: + - a6e9d94e286984b9e44c58df5eeb20cf5c08b9acff4af341ddecdfbe3ea9249d + features: + - and: + # the installer portion of a single-file application is native code (in the samples I have seen) so format(dotnet) does not apply here. + - string: "Failure processing application bundle; possible file corruption." + - string: "Failure processing application bundle." + - string: "Bundle header version compatibility check failed" + - string: "A fatal error was encountered. Could not extract contents of the bundle"