issues
search
chainguard-dev
/
bincapz
detect malicious program behaviors
Apache License 2.0
380
stars
24
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Refactor how we handle third_party rules
#195
tstromberg
closed
2 months ago
0
Make --ignore-self more precise
#194
tstromberg
closed
2 months ago
0
fix reversed got/want in integration test diffs
#193
tstromberg
closed
2 months ago
0
Bump the all group with 3 updates
#192
dependabot[bot]
closed
2 months ago
0
Bump golang.org/x/term from 0.19.0 to 0.20.0
#191
dependabot[bot]
closed
2 months ago
0
Replace ignoreSelf with include/exclude syntax for scan paths
#190
egibs
closed
2 months ago
2
integration test diffs are difficult to understand
#189
tstromberg
closed
2 months ago
0
--all should set --ignore-self=false
#188
tstromberg
closed
2 months ago
0
Allow the samples/ directory to be scanned by default
#187
egibs
closed
2 months ago
2
Use go.mod for setup-go; update golangci-lint
#186
egibs
closed
2 months ago
1
critical false positive: mthcht_thk_yara_rules (RDPassSpray)
#185
tstromberg
closed
2 months ago
3
bincapz --ignore-self silently drops samples/
#184
tstromberg
closed
2 months ago
7
Add YARA-CI GitHub App as part of CI Checks
#183
egibs
closed
2 months ago
2
Update to Go 1.22
#182
egibs
closed
2 months ago
2
Add Makefile targets to automate Yara installations from source
#181
egibs
closed
2 months ago
1
Preserve original path for archives; add to output
#180
egibs
closed
2 months ago
3
remove release job, it does not work as is and need more things
#179
cpanato
closed
2 months ago
2
transparent archives: present original archive path and inner path in output
#178
tstromberg
closed
1 month ago
3
Mask Chrome extension IDs in threat-hunting keyword list
#177
tstromberg
closed
2 months ago
2
XProtect flags bincapz as malware
#176
tstromberg
closed
2 months ago
2
Rule improvements based on temporal analysis
#175
tstromberg
closed
2 months ago
0
Add support for archives within directories
#174
egibs
closed
2 months ago
3
v1.0.0 release blockers
#173
tstromberg
opened
2 months ago
5
Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
#172
dependabot[bot]
closed
2 months ago
0
Bump actions/checkout from 4.1.3 to 4.1.4 in the all group
#171
dependabot[bot]
closed
2 months ago
0
Upgrade to go1.22 and add goreleaser job checker
#170
cpanato
closed
2 months ago
3
Improve rules based on LightSpy + add Huntress to third_party
#169
tstromberg
closed
2 months ago
0
Add rules to ignore F-strings and comments
#168
egibs
closed
2 months ago
0
Ignore bincapz findings by default
#167
egibs
closed
2 months ago
0
Add rule to detect references to Github comment attachments
#166
tstromberg
closed
2 months ago
0
Import rule URLs, add them to markdown & JSON output
#165
tstromberg
closed
2 months ago
0
Improve detection for Python setuptools backdoors
#164
tstromberg
closed
1 month ago
0
powershell: detect verbose hidden incantation
#163
tstromberg
closed
2 months ago
0
Fix GoReleaser
#162
egibs
closed
2 months ago
1
goreleaser failed: line 6: cannot unmarshal !!map into []config.Build
#161
tstromberg
closed
2 months ago
2
Add ThreatHunting-Keywords-yara-rules
#160
egibs
closed
2 months ago
4
markdown diff: split add/remove tables
#159
tstromberg
closed
2 months ago
0
terminal: dynamically scale output (again)
#158
tstromberg
closed
2 months ago
0
rules: Add more reference URLs
#157
tstromberg
closed
2 months ago
0
markdown: Add evidence column, hide metadata rows
#156
tstromberg
closed
2 months ago
0
Bump actions/checkout from 4.1.1 to 4.1.3 in the all group
#155
dependabot[bot]
closed
2 months ago
0
markdown: Include evidence column and URL links
#154
tstromberg
closed
2 months ago
1
Add count + total statistics
#153
egibs
closed
2 months ago
0
actions: reduce unnecessary lint noise for non-code files
#152
tstromberg
closed
2 months ago
0
Update to YARAForge 2024-04-14
#151
tstromberg
closed
2 months ago
0
Tune packer rules to avoid false-positives
#150
tstromberg
closed
2 months ago
0
Disable godmode, import rules based on it
#149
tstromberg
closed
2 months ago
0
Add /dev/ rule
#148
egibs
closed
2 months ago
6
add generic /dev path detection
#147
tstromberg
closed
2 months ago
0
Massive rule tuning to improve Linux detection and output
#146
tstromberg
closed
2 months ago
0
Previous
Next