mr-tz
e18704545a
fix call/thread scopes manually
2023-11-24 11:35:00 +01:00
mr-tz
784c9dca53
upgrade rules using updated script
2023-11-24 11:34:28 +01:00
Moritz Raabe
d2d3fd30ab
handle more cases
...
closes #617
2022-09-05 17:58:35 +02:00
Willi Ballenthin
57e1732f5c
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
...
This reverts commit d43a6ee544
2022-06-28 15:23:20 -06:00
Moritz
e5f56c8450
Update hash-data-with-crc32.yml
2022-06-24 09:44:12 +02:00
Willi Ballenthin
88c9c786ca
*: use meta.authors everywhere
2022-05-26 11:56:31 -06:00
William Ballenthin
d43a6ee544
Revert "Merge pull request #548 from mandiant/feature-remove-flavors"
...
This reverts commit bc28847dd982308c4109
2022-04-27 06:23:36 -06:00
Willi Ballenthin
c14431d50d
crc: fix logic
2022-04-05 15:18:33 -06:00
Willi Ballenthin
202c60cd5a
fix adler logic
2022-04-05 15:01:15 -06:00
Willi Ballenthin
904bf3ef00
*: remove /x32 and /x64 flavors and use instruction scope
2022-04-05 12:25:14 -06:00
Moritz Raabe
25938ca10c
change to mandiant.com
2021-09-28 12:21:11 +02:00
William Ballenthin
6e501e8151
rules: convert inline comments to descriptions
...
closes #1
2021-05-18 10:45:41 -06:00
Desiree Beck
5d285c5651
mappings for additions to namespaces
2021-01-21 15:29:06 -05:00
Desiree Beck
33817fdd83
update micro objective name: data manipulation to data
2020-12-12 12:18:47 -05:00
re-fox
5221c630be
Update and rename validate-credit-card-number-using-luhn-algorithm.yml to validate-payment-card-number-using-luhn-algorithm.yml
2020-11-16 10:18:30 -05:00
Matt Williams
251e0a388b
Moving from nursery
2020-10-23 11:39:01 -04:00
William Ballenthin
20025514e5
fix mbc syntax
2020-10-21 09:53:39 -06:00
Desiree Beck
a0f10b4cf2
add mappings
2020-10-19 14:04:15 -04:00
David Cannings
956d4d18ea
Add CRC32 16-bit constants
2020-09-28 15:58:04 +01:00
re-fox
f73980c3c1
Update validate-credit-card-number-using-luhn-algorithm.yml
...
linter fix
2020-08-10 12:37:43 -04:00
re-fox
4b3724b401
Rename validate-credit-card-number-with-luhn-algorithm.yml to validate-credit-card-number-using-luhn-algorithm.yml
...
filename fix
2020-08-10 12:29:07 -04:00
re-fox
f7743512a6
Update validate-credit-card-number-with-luhn-algorithm.yml
2020-08-10 12:14:39 -04:00
re-fox
f77a122ea5
Update validate-credit-card-number-with-luhn-algorithm.yml
...
Adding digital lookup via negative numbers
2020-08-03 10:25:06 -04:00
re-fox
8649184a88
Update validate-credit-card-number-with-luhn-algorithm.yml
...
Added in additional check for a compiler optimized version of `% 10` that was `61b8a9dee90cc494cfeebe9467b8085cde4563f307620e73040f48bd9140f00c` a POSeidon binary.
2020-07-24 15:56:18 -04:00
re-fox
9719dd3570
Update validate-credit-card-number-with-luhn-algorithm.yml
...
Added loop modifier now that https://github.com/fireeye/capa/pull/192 is pulled.
Added case where a sample (`af13e7583ed1b27c4ae219e344a37e2b`) was using a `lea eax,[eax + -0x30]` rather than a `sub`.
2020-07-24 11:27:19 -04:00
re-fox
00325979ba
Update and rename luhn-credit-card-validation.yml to validate-credit-card-number-with-luhn-algorithm.yml
2020-07-23 15:28:48 -04:00
_re_fox
fabaddaf6d
updated with luhn credit card algo
2020-07-23 14:59:43 -04:00
Ana María Martínez Gómez
25f1157db0
Change characteristic syntax in rules
...
Get rid of `true` in characteristic as it is implicit.
The changes are the result of executing the following commands:
```
find . -type f -exec sed -i.bak "s/\(.*\)characteristic(\(.*\)): true/\1characteristic: \2/g" {} \;
find . -name "*.bak" -type f -delete
```
2020-07-01 19:19:49 +02:00
William Ballenthin
54cfb05bd0
rules: address comments in #14
2020-06-26 17:45:56 -06:00
William Ballenthin
7b4f4d10fb
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
William Ballenthin
5f57dbdbc9
rules: reorganize rule names, namespaces, and ATT&CK mappings
2020-06-21 17:25:43 -06:00
