Ana Maria Martinez Gomez e0cefa438d update translate-characteristic-into-permission.yml ... - rename it to `inspect section memory permissions` and add a description so it is clear what it is meant. - use the `3 or more` feature to improve the rule. Note that `optional` doesn't behave as you may expect for this feature. Use `and` to ensure `optional` behaves as we want.		2021-03-29 11:04:42 +02:00
..
access-pe-header.yml	removing ntdll requirement from function features exported by both ntdll and ntoskrnl	2021-02-16 18:28:05 -07:00
enumerate-pe-sections.yml	add load-code/pe/enumerate-pe-sections.yml	2021-03-25 19:34:31 +01:00
inject-dll-reflectively.yml	update translate-characteristic-into-permission.yml	2021-03-29 11:04:42 +02:00
inspect-section-memory-permissions.yml	update translate-characteristic-into-permission.yml	2021-03-29 11:04:42 +02:00
parse-pe-exports.yml	add load-code/pe/parse-pe-exports.yml	2021-03-25 19:34:47 +01:00
parse-pe-header.yml	rule updates based on PMA labs	2021-03-22 09:45:56 +01:00
rebuild-import-table.yml	add load-code/pe/rebuild-import-table.yml	2021-03-25 19:34:47 +01:00