vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-02 11:27:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

upgrade rules using updated script

Browse source
This commit is contained in:
mr-tz 2023-10-25 16:01:12 +02:00
parent e0d5e95a82
commit 784c9dca53
847 changed files with 2541 additions and 847 deletions
Download patch file Download diff file Expand all files Collapse all files

4
load-code/shellcode/execute-shellcode-via-createthreadpoolwait.yml
View file

@ -4,7 +4,9 @@ rule:
namespace: load-code/shellcode
authors:
- jakub.jozwiak@mandiant.com
scope: function
scopes:
static: function
dynamic: thread
references:
- https://github.com/S4R1N/AlternativeShellcodeExec/blob/master/CreateThreadPoolWait/CreateThreadPoolWait.cpp
examples: