From fe99a653e8d02022a06168438e66ea962c36b53c Mon Sep 17 00:00:00 2001 From: dhruvak001 Date: Fri, 31 Jan 2025 03:59:33 +0530 Subject: [PATCH] CI error:scope interchanged --- .../windows-file-protection/bypass-windows-file-protection.yml | 2 +- linking/runtime-linking/link-many-functions-at-runtime.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml b/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml index 65614828..e6ccaa07 100644 --- a/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml +++ b/host-interaction/file-system/windows-file-protection/bypass-windows-file-protection.yml @@ -6,7 +6,7 @@ rule: - michael.hunhoff@mandiant.com scopes: static: function - dynamic: span of calls + dynamic: thread mbc: - Defense Evasion::Disable or Evade Security Tools::Bypass Windows File Protection [F0004.007] examples: diff --git a/linking/runtime-linking/link-many-functions-at-runtime.yml b/linking/runtime-linking/link-many-functions-at-runtime.yml index d6cfc39b..46db81f3 100644 --- a/linking/runtime-linking/link-many-functions-at-runtime.yml +++ b/linking/runtime-linking/link-many-functions-at-runtime.yml @@ -7,7 +7,7 @@ rule: - joakim@intezer.com scopes: static: function - dynamic: thread + dynamic: span of calls att&ck: - Execution::Shared Modules [T1129] examples: