vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-03 03:47:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

*: use meta.authors everywhere

Browse source
This commit is contained in:
Willi Ballenthin 2022-05-26 11:56:31 -06:00
parent eaa568abf6
commit 88c9c786ca
No known key found for this signature in database
668 changed files with 1279 additions and 669 deletions
Download patch file Download diff file Expand all files Collapse all files

3
load-code/shellcode/execute-shellcode-via-createthreadpoolwait.yml
View file

@ -2,7 +2,8 @@ rule:
meta:
name: execute shellcode via CreateThreadpoolWait
namespace: load-code/shellcode
author: jakub.jozwiak@mandiant.com
authors:
- jakub.jozwiak@mandiant.com
scope: function
references:
- https://github.com/S4R1N/AlternativeShellcodeExec/blob/master/CreateThreadPoolWait/CreateThreadPoolWait.cpp