capa-rules/compiler
Willi Ballenthin c1d20764ad
use "span of calls" scope (#973)
* use sequence scope instead of thread scope for "static: function" rules

* use sequence scope instead of thread scope for "static: basic block" rules

* make runtime linking rules more concise

* doc: describe sequence scope

* rename "sequence" scope to "span of calls" scope

* Update anti-analysis/anti-av/check-for-sandbox-and-av-modules.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-device.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/get-geographical-location.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/file-managers/gather-classicftp-information.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/database/wmi/reference-wmi-statements.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/database/sql/reference-sql-statements.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

---------

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>
2025-01-29 10:27:13 +01:00
..
autohotkey upgrade rules using updated script 2023-11-24 11:34:28 +01:00
autoit upgrade rules using updated script 2023-11-24 11:34:28 +01:00
cx_freeze upgrade rules using updated script 2023-11-24 11:34:28 +01:00
d upgrade rules using updated script 2023-11-24 11:34:28 +01:00
dart Add rule compiled-with-dart.yml (#906) 2024-06-05 11:40:32 +02:00
delphi upgrade rules using updated script 2023-11-24 11:34:28 +01:00
exe4j upgrade rules using updated script 2023-11-24 11:34:28 +01:00
go reduce FPs by adjusting go1. substring feature (#891) 2024-04-24 13:38:06 +02:00
mingw upgrade rules using updated script 2023-11-24 11:34:28 +01:00
nim upgrade rules using updated script 2023-11-24 11:34:28 +01:00
nuitka upgrade rules using updated script 2023-11-24 11:34:28 +01:00
perl2exe use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
ps2exe upgrade rules using updated script 2023-11-24 11:34:28 +01:00
py2exe fix call/thread scopes manually 2023-11-24 11:35:00 +01:00
pyarmor upgrade rules using updated script 2023-11-24 11:34:28 +01:00
rust upgrade rules using updated script 2023-11-24 11:34:28 +01:00
v upgrade rules using updated script 2023-11-24 11:34:28 +01:00
vb fix some dynamic unsupported rules 2023-11-24 11:35:05 +01:00
zig upgrade rules using updated script 2023-11-24 11:34:28 +01:00