vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 10:58:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
capa-rules/persistence/registry
History
Exact
xpzhxhm 5da642668e
Add new rule persist-via-shellserviceobjectdelayload-registry-key.yml (#1117) 
* Create persist-via-shellserviceobjectdelayload-registry-key.yml

* Update persist-via-shellserviceobjectdelayload-registry-key.yml

Update rules and description, improve scope to function/basic block by adding HKLM constant, remove blank line.

* Update persist-via-shellserviceobjectdelayload-registry-key.yml

* Change the scope to function
2026-02-26 09:44:06 -07:00
..
appinitdlls use "span of calls" scope for registry operations that span multiple calls, e.g. open registry key and set value (#999) 2025-02-20 14:02:16 -07:00
ginadll use "span of calls" scope for registry operations that span multiple calls, e.g. open registry key and set value (#999) 2025-02-20 14:02:16 -07:00
run add new rules to detect disabling system features via registry on Windows (#1034) 2025-03-24 10:38:19 -06:00
winlogon-helper use "span of calls" scope for registry operations that span multiple calls, e.g. open registry key and set value (#999) 2025-02-20 14:02:16 -07:00
persist-via-active-setup-registry-key.yml use "span of calls" scope for registry operations that span multiple calls, e.g. open registry key and set value (#999) 2025-02-20 14:02:16 -07:00
persist-via-shellserviceobjectdelayload-registry-key.yml Add new rule persist-via-shellserviceobjectdelayload-registry-key.yml (#1117) 2026-02-26 09:44:06 -07:00