mirror of
https://github.com/vee1e/capa-rules.git
synced 2026-09-01 10:58:40 +00:00
Update Mappings for MBC (part 9)
This commit is contained in:
parent
d65bb1ebd6
commit
86f8ac6ccd
4 changed files with 8 additions and 0 deletions
|
|
@ -7,6 +7,8 @@ rule:
|
|||
scope: function
|
||||
att&ck:
|
||||
- Discovery::File and Directory Discovery [T1083]
|
||||
mbc:
|
||||
- Discovery::File and Directory Discovery [E1083]
|
||||
examples:
|
||||
- 7351f8a40c5450557b24622417fc478d:0x405438
|
||||
features:
|
||||
|
|
|
|||
|
|
@ -8,6 +8,8 @@ rule:
|
|||
scope: function
|
||||
att&ck:
|
||||
- Discovery::File and Directory Discovery [T1083]
|
||||
mbc:
|
||||
- Discovery::File and Directory Discovery [E1083]
|
||||
references:
|
||||
- https://github.com/hfiref0x/TDL/blob/cc4b46ae1c939b14a22a734a727b163f873a41b5/Source/Furutaka/sup.c#L315
|
||||
examples:
|
||||
|
|
|
|||
|
|
@ -8,6 +8,8 @@ rule:
|
|||
scope: function
|
||||
att&ck:
|
||||
- Discovery::File and Directory Discovery [T1083]
|
||||
mbc:
|
||||
- Discovery::File and Directory Discovery [E1083]
|
||||
examples:
|
||||
- 5f66b82558ca92e54e77f216ef4c066c:0x40640E
|
||||
features:
|
||||
|
|
|
|||
|
|
@ -7,6 +7,8 @@ rule:
|
|||
scope: function
|
||||
att&ck:
|
||||
- Execution::Command and Scripting Interpreter::PowerShell [T1059.001]
|
||||
mbc:
|
||||
- Execution::Command and Scripting Interpreter [E1059]
|
||||
examples:
|
||||
- 692f7fd6d198e804d6af98eb9e390d61:0x6000004
|
||||
features:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue