Skip to content

Actions: mandiant/capa-rules

Update rules number badge and sync rules submodule in capa

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
91 workflow runs
91 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

extend terminate-process.yml to include exit_group #970 (#991)
Update rules number badge and sync rules submodule in capa #640: Commit c0aa922 pushed by williballenthin
February 4, 2025 20:49 31s master
February 4, 2025 20:49 31s
https://github.com/mandiant/capa-rules/issues/974 (#992)
Update rules number badge and sync rules submodule in capa #639: Commit 1468692 pushed by williballenthin
February 4, 2025 20:49 30s master
February 4, 2025 20:49 30s
internal-dotnet-file-limitation.yml: make it valid for static scope t…
Update rules number badge and sync rules submodule in capa #638: Commit 8d5e7e2 pushed by williballenthin
February 4, 2025 20:48 32s master
February 4, 2025 20:48 32s
remove testing rule (#989)
Update rules number badge and sync rules submodule in capa #637: Commit 79afc55 pushed by williballenthin
February 4, 2025 09:23 29s master
February 4, 2025 09:23 29s
add dotnet limitation rule for dynamic samples (#983)
Update rules number badge and sync rules submodule in capa #636: Commit cfd394d pushed by williballenthin
February 4, 2025 09:23 27s master
February 4, 2025 09:23 27s
remove redundant matches for dynamic scope (#987)
Update rules number badge and sync rules submodule in capa #635: Commit 75c16e4 pushed by williballenthin
February 4, 2025 08:32 29s master
February 4, 2025 08:32 29s
reverting changes
Update rules number badge and sync rules submodule in capa #634: Commit 13b6bc0 pushed by williballenthin
February 3, 2025 18:55 29s master
February 3, 2025 18:55 29s
graduate onedrive rule
Update rules number badge and sync rules submodule in capa #633: Commit 0ea3394 pushed by williballenthin
January 29, 2025 17:54 40s master
January 29, 2025 17:54 40s
Merge pull request #985 from mandiant/fix/self/delete/fp
Update rules number badge and sync rules submodule in capa #632: Commit ff76d01 pushed by mr-tz
January 29, 2025 09:37 4m 36s master
January 29, 2025 09:37 4m 36s
use "span of calls" scope (#973)
Update rules number badge and sync rules submodule in capa #631: Commit c1d2076 pushed by williballenthin
January 29, 2025 09:27 14m 3s master
January 29, 2025 09:27 14m 3s
remove duplicate features from some rules (#984)
Update rules number badge and sync rules submodule in capa #630: Commit b4e0c8c pushed by williballenthin
January 28, 2025 11:54 34s master
January 28, 2025 11:54 34s
New rules: RSA & bigint (#982)
Update rules number badge and sync rules submodule in capa #629: Commit 7085102 pushed by mike-hunhoff
January 21, 2025 18:36 27s master
January 21, 2025 18:36 27s
Add CONTRIBUTING file & update ISSUE TEMPLATES (#980)
Update rules number badge and sync rules submodule in capa #628: Commit 1aab323 pushed by williballenthin
January 15, 2025 21:25 27s master
January 15, 2025 21:25 27s
update create-process-suspended to include DEBUG_ONLY_THIS_PROCESS (#…
Update rules number badge and sync rules submodule in capa #627: Commit ff9db74 pushed by mike-hunhoff
January 7, 2025 20:02 30s master
January 7, 2025 20:02 30s
Add 38 new registry-based persistence techniques (#954)
Update rules number badge and sync rules submodule in capa #626: Commit e033410 pushed by mr-tz
December 9, 2024 10:29 34s master
December 9, 2024 10:29 34s
Improve existing persistence rules (#953)
Update rules number badge and sync rules submodule in capa #625: Commit ce5e041 pushed by mr-tz
December 9, 2024 09:51 40s master
December 9, 2024 09:51 40s
Add 10 file system-based persistence techniques (#955)
Update rules number badge and sync rules submodule in capa #624: Commit ed816a8 pushed by mr-tz
December 3, 2024 16:26 31s master
December 3, 2024 16:26 31s
extend rule features and rename (#969)
Update rules number badge and sync rules submodule in capa #623: Commit 1adcf13 pushed by mr-tz
December 3, 2024 13:12 40s master
December 3, 2024 13:12 40s
Add .NET AoT & TouchSocket linking detection (#948)
Update rules number badge and sync rules submodule in capa #622: Commit 1649218 pushed by mr-tz
November 28, 2024 10:33 41s master
November 28, 2024 10:33 41s
Merge pull request #956 from jorik-utwente/add-miscellaneous-persiste…
Update rules number badge and sync rules submodule in capa #621: Commit f3bb093 pushed by mr-tz
November 25, 2024 08:21 34s master
November 25, 2024 08:21 34s
Merge pull request #952 from jorik-utwente/narrow-dyn-scope-atomic-op…
Update rules number badge and sync rules submodule in capa #620: Commit e50d824 pushed by mr-tz
November 19, 2024 16:42 33s master
November 19, 2024 16:42 33s
Merge pull request #963 from mandiant/mr-tz-patch-1
Update rules number badge and sync rules submodule in capa #619: Commit 5d02084 pushed by mr-tz
November 19, 2024 15:51 36s master
November 19, 2024 15:51 36s
Add rules for various stealer techniques (#960)
Update rules number badge and sync rules submodule in capa #618: Commit 993785d pushed by mr-tz
November 15, 2024 10:12 36s master
November 15, 2024 10:12 36s
added detections for reading/writing shadow file, password database (…
Update rules number badge and sync rules submodule in capa #617: Commit f880b13 pushed by mr-tz
October 30, 2024 15:19 31s master
October 30, 2024 15:19 31s
Merge pull request #950 from mandiant/fix/enc-scope
Update rules number badge and sync rules submodule in capa #616: Commit b325cf8 pushed by mr-tz
October 28, 2024 10:23 32s master
October 28, 2024 10:23 32s