capa-rules/load-code/pe
Ana Maria Martinez Gomez e46c667bdb
add translate-characteristic-into-permission.yml
Identify translation of PE characteristics into permissions. It could be
used in reflective dll injection to replicate the permissions of the
dll mapped in memory.
2021-03-25 19:37:39 +01:00
..
access-pe-header.yml removing ntdll requirement from function features exported by both ntdll and ntoskrnl 2021-02-16 18:28:05 -07:00
enumerate-pe-sections.yml add load-code/pe/enumerate-pe-sections.yml 2021-03-25 19:34:31 +01:00
inject-dll-reflectively.yml add translate-characteristic-into-permission.yml 2021-03-25 19:37:39 +01:00
parse-pe-exports.yml add load-code/pe/parse-pe-exports.yml 2021-03-25 19:34:47 +01:00
parse-pe-header.yml rule updates based on PMA labs 2021-03-22 09:45:56 +01:00
rebuild-import-table.yml add load-code/pe/rebuild-import-table.yml 2021-03-25 19:34:47 +01:00
translate-characteristic-into-permission.yml add translate-characteristic-into-permission.yml 2021-03-25 19:37:39 +01:00