vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
capa-rules/host-interaction/process/inject
History
Michael Hunhoff 750e164a41 removing ntdll requirement from function features exported by both ntdll and ntoskrnl
2021-02-16 18:28:05 -07:00
..
allocate-rwx-memory.yml Improve injection detection and some refactoring of existing rules 2021-01-28 14:47:31 +01:00
allocate-user-process-rwx-memory.yml
attach-user-process-memory.yml
free-user-process-memory.yml added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
hijack-thread-execution.yml Adjusts test file of hijack-thread-execution.yml, resolves conflict in inject-thread.yml and removes articles from rules 2021-01-28 15:28:53 +01:00
inject-apc.yml removing ntdll requirement from function features exported by both ntdll and ntoskrnl 2021-02-16 18:28:05 -07:00
inject-dll.yml capafmted rules 2021-01-28 17:26:25 +01:00
inject-pe.yml capafmted rules 2021-01-28 17:26:25 +01:00
inject-thread.yml capafmted rules 2021-01-28 17:26:25 +01:00
use-process-doppelganging.yml
use-process-replacement.yml capafmted rules 2021-01-28 17:26:25 +01:00