Code

upgrade rules using updated script#839

Code

Merged

mr-tz merged 17 commits intomastermandiant/capa-rules:masterfrom dynamic-rules-mr-2mandiant/capa-rules:dynamic-rules-mr-2Copy head branch name to clipboardNov 29, 2023

+3,220-1,067

Commits

Commits on Nov 24, 2023

• upgrade rules using updated script

  mr-tz

  committed
  784c9dc

  Copy full SHA for 784c9dc

• fix call/thread scopes manually

  mr-tz

  committed
  e187045

  Copy full SHA for e187045

• fix scopes for rules with subscopes

  mr-tz

  committed
  5076cf4

  Copy full SHA for 5076cf4

• fix scopes for rules with subscopes 2

  mr-tz

  committed
  8a36231

  Copy full SHA for 8a36231

• fix some dynamic unsupported rules

  mr-tz

  committed
  2d3be8e

  Copy full SHA for 2d3be8e

• use number to support 32 and 64 bit, add support for dynamic analysis

  mr-tz

  committed
  b4dfc1a

  Copy full SHA for b4dfc1a

• further dynamic scope tweaks

  

  williballenthin

  authored and

  mr-tz

  committed
  a6f3e41

  Copy full SHA for a6f3e41

• fmt

  

  williballenthin

  authored and

  mr-tz

  committed
  3ce798b

  Copy full SHA for 3ce798b

• vmci: tweak required vs optional APIs

  

  williballenthin

  authored and

  mr-tz

  committed
  696287d

  Copy full SHA for 696287d

• update scopes

  mr-tz

  committed
  5e2dae1

  Copy full SHA for 5e2dae1

• update scopes

  mr-tz

  committed
  5430889

  Copy full SHA for 5430889

• graduate rule from nursery

  mr-tz

  committed
  305adfd

  Copy full SHA for 305adfd

Commits on Nov 28, 2023

• suggest to run on dynamic trace for packed samples (#852)

  Show description for 5a0d4df
  

  mr-tz

  and

  williballenthin

  authored
  5a0d4df

  Copy full SHA for 5a0d4df

Commits on Nov 29, 2023

• update rule format documentation with dynamic details (#851)

  Show description for bdf01d6
  

  williballenthin

  and

  mr-tz

  authored
  bdf01d6

  Copy full SHA for bdf01d6

• Merge branch 'master' into dynamic-rules-mr-2

  mr-tz

  committed
  e6f11c2

  Copy full SHA for e6f11c2

• update scopes

  mr-tz

  committed
  bebddea

  Copy full SHA for bebddea

• Merge branch 'dynamic-rules-mr-2' of github.com:mandiant/capa-rules into dynamic-rules-mr-2

  mr-tz

  committed
  cafb13d

  Copy full SHA for cafb13d