13 commits

Author	SHA1	Message	Date
mr-tz	784c9dca53	upgrade rules using updated script	2023-11-24 11:34:28 +01:00
Willi Ballenthin	7685a232d9	forwarded export: fmt	2023-08-02 14:41:35 +02:00
Ronnie Salomonsen	65ab87b292	Update executable/pe/export/forwarded-export.yml ... Co-authored-by: Willi Ballenthin <wballenthin@google.com>	2023-07-19 14:54:12 +02:00
Ronnie Salomonsen	a8d00309c3	Add new rule for forwarded exports and update doc to with new characteristic and examples under export feature	2023-07-19 12:40:20 +02:00
Moritz	915c1f5e07	remove very common .rsrc section rule (#761) ... * remove very common rule	2023-05-26 10:34:25 +02:00
Willi Ballenthin	88c9c786ca	*: use meta.authors everywhere	2022-05-26 11:56:31 -06:00
Moritz Raabe	25938ca10c	change to mandiant.com	2021-09-28 12:21:11 +02:00
Moritz Raabe	6c9f83dd7f	merge duplicate rules	2021-03-22 18:42:54 +01:00
Desiree Beck	490bc34a05	add method to pe area	2020-10-19 14:01:02 -04:00
William Ballenthin	4350ffad33	fix rule paths thanks to linter	2020-07-23 11:58:23 -06:00
William Ballenthin	54cfb05bd0	rules: address comments in #14	2020-06-26 17:45:56 -06:00
William Ballenthin	7b4f4d10fb	rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better	2020-06-21 17:54:01 -06:00
William Ballenthin	5f57dbdbc9	rules: reorganize rule names, namespaces, and ATT&CK mappings	2020-06-21 17:25:43 -06:00