capa-rules
capa-rules copied to clipboard
Additional rules to support capa-scripts.
I noticed that the current .NET rules missed a lot of functionality/API calls that the aspx test malware includes. I therefore modified the currently available rules and created new ones to fully leverage the capa-scripts extraction capabilities.