capa-rules
capa-rules copied to clipboard
encode data using JSON
Rule name
encode data using JSON
Summary
Encode data using JavaScript Object Notation (JSON).
Possible test samples
Publicly available samples that may contain the capability this rule should detect (MD5 hashes):
- 285e57297f578e565dc814301149edbf
- d32fc81161b5bec6e6fb2326c47b3d3e
Namespace
Proposed namespace: data-manipulation/encoding
. More details in https://github.com/fireeye/capa-rules/blob/master/doc/format.md#rule-namespace
att&ck
aka.mitre.att&ck.t1027