Commit graph

3 commits

Author SHA1 Message Date
Mike Hunhoff
7a52b6f9c0
dotnet: adding new rules based on recent samples (#1082)
* dotnet: adding new rules based on recent samples
2025-11-07 08:39:46 +01:00
mr-tz
784c9dca53 upgrade rules using updated script 2023-11-24 11:34:28 +01:00
johnk3r
3f298900d4
use .NET libraries (#612)
* Add files via upload

https://github.com/mandiant/capa-rules/issues/609

* Update load-suspicious-libraries.yml

* Delete load-suspicious-libraries.yml

* Create load-suspicious-libraries.yml

* Update load-suspicious-libraries.yml

* Update load-suspicious-libraries.yml

* embed dependencies as resources using Fody/Costura

https://github.com/mandiant/capa-rules/pull/612

* Delete embed-dependencies-as-resources-using-fody-costura.yml

* embed-dependencies-as-resources-using-fody-costura

https://github.com/mandiant/capa-rules/pull/612

* Rename embed-dependencies-as-resources-using-fody-costura.yml to embed-dependencies-as-resources-using-fodycostura.yml

* use-dotnet-library-encryptdecryptutils

https://github.com/mandiant/capa-rules/pull/612

* use-dotnet-library-newtonsoft.json

https://github.com/mandiant/capa-rules/pull/612

* use-dotnet-library-sharpclipboard

https://github.com/mandiant/capa-rules/pull/612

* use-dotnet-library-sharpvectors

https://github.com/mandiant/capa-rules/pull/612

* Delete load-suspicious-libraries.yml

* Rename use-dotnet-library-newtonsoft.json.yml to use-dotnet-library-newtonsoftjson.yml

* Update use-dotnet-library-newtonsoftjson.yml

* Update use-dotnet-library-sharpvectors.yml

* Update use-dotnet-library-encryptdecryptutils.yml

* Update use-dotnet-library-sharpclipboard.yml

* Rename anti-analysis/obfuscation/use-dotnet-library-encryptdecryptutils.yml to data-manipulation/encryption/aes/use-dotnet-library-encryptdecryptutils.yml

* Rename nursery/use-dotnet-library-newtonsoftjson.yml to data-manipulation/json/use-dotnet-library-newtonsoftjson.yml

* Rename nursery/use-dotnet-library-sharpvectors.yml to data-manipulation/svg/use-dotnet-library-sharpvectors.yml

* Update use-dotnet-library-sharpclipboard.yml

* Update use-dotnet-library-newtonsoftjson.yml

* Update use-dotnet-library-sharpvectors.yml

* Update use-dotnet-library-encryptdecryptutils.yml

* Update use-dotnet-library-newtonsoftjson.yml

* Update use-dotnet-library-sharpvectors.yml

* Update use-dotnet-library-encryptdecryptutils.yml

* Update embed-dependencies-as-resources-using-fodycostura.yml

* Update use-dotnet-library-encryptdecryptutils.yml

* Update use-dotnet-library-sharpvectors.yml

* Update use-dotnet-library-newtonsoftjson.yml

* Update use-dotnet-library-sharpclipboard.yml
2022-08-29 18:49:40 +02:00