capa-rules/host-interaction/file-system
William Ballenthin f1b450edf0 update ATT&CK and MBC mappings
thanks to Regina Elwell @ FireEye and @evandrix
closes #316
2021-04-13 09:37:10 -06:00
..
copy added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
create PR change requests 2021-01-07 13:06:35 -07:00
delete added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
exists
files/list removing ntdll requirement from function features exported by both ntdll and ntoskrnl 2021-02-16 18:28:05 -07:00
meta new rules and rule updates from B5F85C26D7AA5A1FB4AF5821B6B5AB9B 2020-12-31 08:44:23 -07:00
read mappings for additions to namespaces 2021-01-21 15:29:06 -05:00
windows-file-protection enforce string formatting with double quotes + escaped special characters 2021-03-24 14:14:38 -06:00
write update ATT&CK and MBC mappings 2021-04-13 09:37:10 -06:00
get-common-file-path.yml added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
get-file-system-object-information.yml added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
get-program-files-directory.yml added mbc mappings in the host-interaction namespace 2020-12-16 15:30:06 -05:00
read-file-via-mapping.yml rule updates based on PMA labs 2021-03-22 09:45:56 +01:00