capa-rules icon indicating copy to clipboard operation
capa-rules copied to clipboard

Additional rules to support capa-scripts.

Open adamstorek opened this issue 2 years ago • 0 comments

I noticed that the current .NET rules missed a lot of functionality/API calls that the aspx test malware includes. I therefore modified the currently available rules and created new ones to fully leverage the capa-scripts extraction capabilities.

adamstorek avatar Aug 04 '22 18:08 adamstorek