Moritz
|
e5f56c8450
|
Update hash-data-with-crc32.yml
|
2022-06-24 09:44:12 +02:00 |
|
Mike Hunhoff
|
1fd82be168
|
Merge pull request #567 from mandiant/mr-tz-patch-1-1
Update compiled-with-borland-delphi.yml
|
2022-06-23 07:27:02 -06:00 |
|
Moritz
|
7c802af22f
|
Update compiled-with-borland-delphi.yml
|
2022-06-23 14:29:02 +02:00 |
|
Willi Ballenthin
|
b96b279d81
|
check-mutex: fix author
|
2022-06-06 13:17:54 -06:00 |
|
Willi Ballenthin
|
20c46c64c8
|
Merge pull request #562 from ryantxu1/master
Update Mappings for MBC (part 8)
|
2022-06-03 11:15:49 -06:00 |
|
ryan
|
92eef819bb
|
Update Mappings for MBC (part 8)
|
2022-06-03 09:43:39 -05:00 |
|
Moritz
|
c90bfeaba2
|
Merge pull request #561 from mandiant/mr-tz-patch-1
Update changelog_author.py
|
2022-06-01 14:12:46 +02:00 |
|
Moritz
|
7c46a34d65
|
Update changelog_author.py
|
2022-05-31 23:05:54 +02:00 |
|
Willi Ballenthin
|
1fee68e72e
|
Merge pull request #560 from mandiant/meta-authors-everywhere
*: use meta.authors everywhere
|
2022-05-31 07:41:48 -06:00 |
|
Willi Ballenthin
|
88c9c786ca
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
Capa Bot
|
eaa568abf6
|
Update rules number badge
|
2022-05-20 14:36:14 +00:00 |
|
Willi Ballenthin
|
5511f8a85b
|
Merge pull request #558 from mandiant/add/get-os-info
get OS information via KUSER_SHARED_DATA
|
2022-05-20 08:35:57 -06:00 |
|
Moritz Raabe
|
d2dbe99596
|
add file
|
2022-05-20 09:25:24 +02:00 |
|
Willi Ballenthin
|
52ff654ca0
|
Merge pull request #557 from idiom/master
Update rules to use a list item instead of a string value for reference
|
2022-05-11 10:33:51 -06:00 |
|
idiom
|
d9dfb69125
|
Update references to define it as a list of related information.
|
2022-05-11 10:47:15 -04:00 |
|
idiom
|
49ac35dbe7
|
Update rules to use a list item instead of a string value for references.
|
2022-05-11 10:39:42 -04:00 |
|
William Ballenthin
|
6728fb0d5a
|
Revert "call $+5 update rule and doc"
This reverts commit c5368ed9a2.
|
2022-04-27 06:28:04 -06:00 |
|
William Ballenthin
|
d43a6ee544
|
Revert "Merge pull request #548 from mandiant/feature-remove-flavors"
This reverts commit bc28847dd9, reversing
changes made to 82308c4109.
|
2022-04-27 06:23:36 -06:00 |
|
William Ballenthin
|
3b72e490b3
|
Revert "Merge pull request #550 from mandiant/remove-dotnet-limitation-rule"
This reverts commit adaffca201, reversing
changes made to bc28847dd9.
|
2022-04-27 05:34:42 -06:00 |
|
William Ballenthin
|
d4d28596bd
|
Revert "Update rules number badge"
This reverts commit 9967d225a6.
|
2022-04-27 05:34:41 -06:00 |
|
William Ballenthin
|
056a6c2f28
|
Revert "Merge pull request #549 from mandiant/feature-doc-updates"
This reverts commit afd356e046, reversing
changes made to 9967d225a6.
|
2022-04-27 05:34:39 -06:00 |
|
William Ballenthin
|
a2f11828f1
|
Revert "check mutex: fix moritz email address"
This reverts commit cddf623c72.
|
2022-04-27 05:34:38 -06:00 |
|
William Ballenthin
|
69cda2adb3
|
Revert "Merge pull request #547 from jtothej/huan"
This reverts commit 87b4de536c, reversing
changes made to cddf623c72.
|
2022-04-27 05:34:36 -06:00 |
|
William Ballenthin
|
a7a9833b9b
|
Revert "Update rules number badge"
This reverts commit f8a03a3014.
|
2022-04-27 05:34:33 -06:00 |
|
Capa Bot
|
f8a03a3014
|
Update rules number badge
|
2022-04-07 07:50:28 +00:00 |
|
Moritz
|
87b4de536c
|
Merge pull request #547 from jtothej/huan
Adding packed-with-huan.yml
|
2022-04-07 09:50:14 +02:00 |
|
Willi Ballenthin
|
cddf623c72
|
check mutex: fix moritz email address
|
2022-04-06 13:26:37 -06:00 |
|
Willi Ballenthin
|
afd356e046
|
Merge pull request #549 from mandiant/feature-doc-updates
format: remove /x32 and /x64, add operand features
|
2022-04-06 12:07:46 -06:00 |
|
Capa Bot
|
9967d225a6
|
Update rules number badge
|
2022-04-06 18:07:39 +00:00 |
|
Willi Ballenthin
|
adaffca201
|
Merge pull request #550 from mandiant/remove-dotnet-limitation-rule
Delete internal-dotnet-file-limitation.yml
|
2022-04-06 12:07:24 -06:00 |
|
Moritz
|
98941e0e75
|
Delete internal-dotnet-file-limitation.yml
|
2022-04-06 20:04:05 +02:00 |
|
Willi Ballenthin
|
79f7012aa9
|
format: remove /x32 and /x64, add operand features
|
2022-04-06 11:39:55 -06:00 |
|
Willi Ballenthin
|
bc28847dd9
|
Merge pull request #548 from mandiant/feature-remove-flavors
remove /x32 and /x64 flavors and use instruction scope
|
2022-04-06 11:03:33 -06:00 |
|
Willi Ballenthin
|
ccf3f8fb5f
|
luhn no lookup table: cleanup logic
|
2022-04-05 17:15:22 -06:00 |
|
Willi Ballenthin
|
f1a3b78555
|
parse credit card info: update limit
|
2022-04-05 17:15:08 -06:00 |
|
Willi Ballenthin
|
c14431d50d
|
crc: fix logic
|
2022-04-05 15:18:33 -06:00 |
|
Willi Ballenthin
|
da3ef38825
|
software breakpoints: document INT3 long form
|
2022-04-05 15:03:41 -06:00 |
|
Willi Ballenthin
|
202c60cd5a
|
fix adler logic
|
2022-04-05 15:01:15 -06:00 |
|
Willi Ballenthin
|
904bf3ef00
|
*: remove /x32 and /x64 flavors and use instruction scope
|
2022-04-05 12:25:14 -06:00 |
|
Capa Bot
|
82308c4109
|
Update rules number badge
|
2022-03-24 09:43:10 +00:00 |
|
Moritz
|
ae0864c7d9
|
Merge pull request #543 from jtothej/v-and-zig
Adding compiled-with-v.yml and compiled-with-zig.yml
|
2022-03-24 10:42:55 +01:00 |
|
jtothej
|
4c4d2dd5ed
|
Adding packed-with-huan.yml
|
2022-03-24 16:24:50 +08:00 |
|
Moritz
|
bc634e613b
|
Merge pull request #546 from mandiant/new/20220323_
update enumerate-services
|
2022-03-24 09:16:12 +01:00 |
|
Michael Hunhoff
|
58de40c15f
|
update enumerate-services
|
2022-03-23 17:04:59 -06:00 |
|
Capa Bot
|
272abaf89c
|
Update rules number badge
|
2022-03-23 17:56:39 +00:00 |
|
Mike Hunhoff
|
51de2eb818
|
Merge pull request #545 from mandiant/new/20222303
adding get-process-image-filename
|
2022-03-23 11:48:38 -06:00 |
|
Mike Hunhoff
|
a458d0d70a
|
Merge pull request #544 from mandiant/update/hijack-thread-execution
update hijack-thread-execution.yml to match additional scenarios
|
2022-03-23 11:48:24 -06:00 |
|
Michael Hunhoff
|
dddf45baa9
|
adding get-process-image-filename
|
2022-03-23 11:34:36 -06:00 |
|
Michael Hunhoff
|
94f1639cb4
|
update hijack-thread-execution.yml to match additional scenarios
|
2022-03-23 09:01:25 -06:00 |
|
jtothej
|
9cc5be5ce4
|
Updated compiled-with-zig.yml - removed Windows specific logic
|
2022-03-22 10:44:36 +08:00 |
|