mirror of
https://github.com/mandiant/capa.git
synced 2025-12-12 23:59:48 -08:00
Sync capa rules submodule
This commit is contained in:
@@ -10,7 +10,7 @@
|
|||||||
|
|
||||||
### Breaking Changes
|
### Breaking Changes
|
||||||
|
|
||||||
### New Rules (13)
|
### New Rules (14)
|
||||||
|
|
||||||
- nursery/get-ntoskrnl-base-address @mr-tz
|
- nursery/get-ntoskrnl-base-address @mr-tz
|
||||||
- host-interaction/network/connectivity/set-tcp-connection-state @johnk3r
|
- host-interaction/network/connectivity/set-tcp-connection-state @johnk3r
|
||||||
@@ -25,6 +25,7 @@
|
|||||||
- nursery/set-thread-name-on-linux michael.hunhoff@mandiant.com
|
- nursery/set-thread-name-on-linux michael.hunhoff@mandiant.com
|
||||||
- load-code/dotnet/load-windows-common-language-runtime michael.hunhoff@mandiant.com blas.kojusner@mandiant.com jakub.jozwiak@mandiant.com
|
- load-code/dotnet/load-windows-common-language-runtime michael.hunhoff@mandiant.com blas.kojusner@mandiant.com jakub.jozwiak@mandiant.com
|
||||||
- nursery/log-keystrokes-via-input-method-manager @mr-tz
|
- nursery/log-keystrokes-via-input-method-manager @mr-tz
|
||||||
|
- nursery/encrypt-data-using-rc4-via-systemfunction032 richard.weiss@mandiant.com
|
||||||
-
|
-
|
||||||
|
|
||||||
### Bug Fixes
|
### Bug Fixes
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
|
|
||||||
[](https://pypi.org/project/flare-capa)
|
[](https://pypi.org/project/flare-capa)
|
||||||
[](https://github.com/mandiant/capa/releases)
|
[](https://github.com/mandiant/capa/releases)
|
||||||
[](https://github.com/mandiant/capa-rules)
|
[](https://github.com/mandiant/capa-rules)
|
||||||
[](https://github.com/mandiant/capa/actions?query=workflow%3ACI+event%3Apush+branch%3Amaster)
|
[](https://github.com/mandiant/capa/actions?query=workflow%3ACI+event%3Apush+branch%3Amaster)
|
||||||
[](https://github.com/mandiant/capa/releases)
|
[](https://github.com/mandiant/capa/releases)
|
||||||
[](LICENSE.txt)
|
[](LICENSE.txt)
|
||||||
|
|||||||
2
rules
2
rules
Submodule rules updated: e454699082...5f579460f5
Reference in New Issue
Block a user