capa-rules/load-code/pe
William Ballenthin f1b450edf0 update ATT&CK and MBC mappings
thanks to Regina Elwell @ FireEye and @evandrix
closes #316
2021-04-13 09:37:10 -06:00
..
access-pe-header.yml removing ntdll requirement from function features exported by both ntdll and ntoskrnl 2021-02-16 18:28:05 -07:00
enumerate-pe-sections.yml add load-code/pe/enumerate-pe-sections.yml 2021-03-25 19:34:31 +01:00
inject-dll-reflectively.yml update ATT&CK and MBC mappings 2021-04-13 09:37:10 -06:00
inspect-section-memory-permissions.yml update translate-characteristic-into-permission.yml 2021-03-29 11:04:42 +02:00
parse-pe-exports.yml add load-code/pe/parse-pe-exports.yml 2021-03-25 19:34:47 +01:00
parse-pe-header.yml rule updates based on PMA labs 2021-03-22 09:45:56 +01:00
rebuild-import-table.yml add load-code/pe/rebuild-import-table.yml 2021-03-25 19:34:47 +01:00