capa-rules/host-interaction
Moritz e88db21de4
fix: rule logic (#592)
* fix: rule logic

* fix: rule logic
2022-07-12 18:09:51 +02:00
..
bootloader *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
cli Update with dotnet capabilities (#590) 2022-07-07 15:22:39 -06:00
clipboard Add new dotnet rules that capture capabilites typically found in backdoors. (#579) 2022-07-07 13:39:51 -06:00
console *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
driver *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
environment-variable dotnet rule updates (#566) 2022-06-28 15:16:24 -06:00
file-system Add new dotnet rules that capture capabilites typically found in backdoors. (#579) 2022-07-07 13:39:51 -06:00
filter *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
firewall/modify *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
gui *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
hardware fix: rule logic (#592) 2022-07-12 18:09:51 +02:00
log *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
mutex Add new dotnet rules that capture capabilites typically found in backdoors. (#579) 2022-07-07 13:39:51 -06:00
network Update with dotnet capabilities (#590) 2022-07-07 15:22:39 -06:00
os Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors"" 2022-06-28 15:23:20 -06:00
process fix: rule logic (#592) 2022-07-12 18:09:51 +02:00
recycle-bin Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors"" 2022-06-28 15:23:20 -06:00
registry Add new dotnet rules that capture capabilites typically found in backdoors. (#579) 2022-07-07 13:39:51 -06:00
service *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
session Update with dotnet capabilities (#590) 2022-07-07 15:22:39 -06:00
software Update get-installed-programs.yml (#584) 2022-07-05 09:52:52 +02:00
thread Add new dotnet rules that capture capabilites typically found in backdoors. (#579) 2022-07-07 13:39:51 -06:00
uac/bypass *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00
wmi *: use meta.authors everywhere 2022-05-26 11:56:31 -06:00