fireeye / capa-rules

Watch 11
Star 45
Fork 4

Code
Issues 20
Pull requests 2
Actions
Security
Insights

Code
Issues
Pull requests
Actions
Security
Insights

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

20 Open 2 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Move doc to .doc directory?

#34 opened Jul 13, 2020 by mr-tz

rule idea: additional detections for packer/protector/tools via section names/keywords rule idea

#32 opened Jul 10, 2020 by mike-hunhoff

rule idea: code execution via Windows API enumeration functions rule idea

#31 opened Jul 10, 2020 by mike-hunhoff 0 of 4

rule idea: detect DES constants rule idea

#30 opened Jul 10, 2020 by mike-hunhoff

rule idea: check OS version new/update rule idea

#28 opened Jul 9, 2020 by mike-hunhoff

MAEC 5.0 uses malware-label-ov instead of malware-category-ov bug

#27 opened Jul 8, 2020 by williballenthin

rule idea: recursive directory listing rule idea

#26 opened Jul 8, 2020 by williballenthin

detect BCrypt use rule idea

#21 opened Jul 1, 2020 by mike-hunhoff 0 of 7

use gh actions to generate a table-of-contents linking to all rules from the readme enhancement

#19 opened Jun 29, 2020 by williballenthin

FP: anti-vm, cpuid used in library function

#18 opened Jun 25, 2020 by Ana06

Rule: detect py2exe migrated-rule rule idea

#11 opened Jun 25, 2020 by Ana06

rule idea: embedded user agent migrated-rule rule idea

#10 opened Jun 25, 2020 by Ana06

rules: anti-debug tricks migrated-rule rule idea

#9 opened Jun 25, 2020 by Ana06

detect techniques from al-khaser migrated-rule rule idea

#8 opened Jun 25, 2020 by Ana06

Add more details to 'resource (.rsrc) section' rule migrated-rule rule idea

#7 opened Jun 25, 2020 by Ana06

rule: use of mnemonic: syscall migrated-rule rule idea

#6 opened Jun 25, 2020 by Ana06

ObtainUserAgentString

#5 opened Jun 25, 2020 by mr-tz

Create and open section

#4 opened Jun 25, 2020 by mr-tz

HttpQueryInfo and options

#3 opened Jun 25, 2020 by mr-tz

convert inline comments to element context enhancement

#1 opened Jun 24, 2020 by williballenthin

ProTip! Find all open issues with in progress development work with linked:pr.

Jun	JUL	Aug
	19
2019	2020	2021