vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 10:58:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

Browse source
This commit is contained in:
William Ballenthin 2020-06-21 17:54:01 -06:00
parent 54bb72d84d
commit 7b4f4d10fb
240 changed files with 104 additions and 826 deletions
Download patch file Download diff file Expand all files Collapse all files

4
load-code/pe/access-pe-header.yml
View file

@ -5,9 +5,7 @@ rule:
author: moritz.raabe@fireeye.com
scope: function
att&ck:
- Execution::Shared Modules T1129
mbc:
- ''
- Execution::Shared Modules [T1129]
examples:
- 563653399B82CD443F120ECEFF836EA3678D4CF11D9B351BB737573C2D856299:0x1400018E0
features:

4
load-code/pe/parse-pe-header.yml
View file

@ -5,9 +5,7 @@ rule:
author: moritz.raabe@fireeye.com
scope: function
att&ck:
- Execution::Shared Modules T1129
mbc:
- ''
- Execution::Shared Modules [T1129]
examples:
- 9324D1A8AE37A36AE560C37448C9705A:0x403DD0
features: