capa-rules/executable
Andrew fbafd732e7 Update rule metadata for rules written by @recvfrom
Mostly just changes @recvfrom to awillia2@cisco.com, but
also updates the descriptions in a few places to be
more precise (I don't think I initially realized that
`api` has function scope and is for API calls whereas
`import` has file level scope and is just for the import)
2021-06-06 23:30:34 -04:00
..
installer Update rule metadata for rules written by @recvfrom 2021-06-06 23:30:34 -04:00
pe merge duplicate rules 2021-03-22 18:42:54 +01:00
resource removing ntdll requirement from function features exported by both ntdll and ntoskrnl 2021-02-16 18:28:05 -07:00
subfile/pe embedded pe: via strings 2021-04-14 12:34:57 -06:00