11 commits

Author	SHA1	Message	Date
Willi Ballenthin	2c5c0ae60b	add API features for ws2_32 ordinals (#893)	2024-04-23 14:20:28 +02:00
mr-tz	784c9dca53	upgrade rules using updated script	2023-11-24 11:34:28 +01:00
Mike Hunhoff	63a4c6d5db	improve .NET detections incl. sockets, files, directories (#708)	2023-02-23 09:45:49 +01:00
Anushka Virgaonkar	95dc5eb27f	Add new dotnet rules that capture capabilites typically found in backdoors. (#579)	2022-07-07 13:39:51 -06:00
Willi Ballenthin	88c9c786ca	*: use meta.authors everywhere	2022-05-26 11:56:31 -06:00
Moritz Raabe	25938ca10c	change to mandiant.com	2021-09-28 12:21:11 +02:00
Joakim Kennedy	78fbf5f3c5	Fix linting errors	2021-08-05 15:35:27 +01:00
Joakim Kennedy	765e182553	A set of rules for Linux ELFs	2021-08-04 15:47:00 +01:00
Desiree Beck	69e7479e40	mapping capa rule updates	2020-09-29 15:05:11 -04:00
William Ballenthin	7b4f4d10fb	rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better	2020-06-21 17:54:01 -06:00
William Ballenthin	5f57dbdbc9	rules: reorganize rule names, namespaces, and ATT&CK mappings	2020-06-21 17:25:43 -06:00