capa-rules/host-interaction/hardware
Willi Ballenthin c1d20764ad
use "span of calls" scope (#973)
* use sequence scope instead of thread scope for "static: function" rules

* use sequence scope instead of thread scope for "static: basic block" rules

* make runtime linking rules more concise

* doc: describe sequence scope

* rename "sequence" scope to "span of calls" scope

* Update anti-analysis/anti-av/check-for-sandbox-and-av-modules.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update anti-analysis/anti-vm/vm-detection/check-for-windows-sandbox-via-device.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/get-geographical-location.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/file-managers/gather-classicftp-information.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/database/wmi/reference-wmi-statements.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update collection/database/sql/reference-sql-statements.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

---------

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>
2025-01-29 10:27:13 +01:00
..
cdrom use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
cpu use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
firmware Move from nursery and update get-system-firmware-table.yml 2024-09-05 18:35:46 +02:00
keyboard use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
memory use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
mouse upgrade rules using updated script 2023-11-24 11:34:28 +01:00
storage use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
enumerate-devices-by-category.yml Use COM instead of bytes features (#864) 2023-12-18 07:54:14 +01:00