search

mandiant / capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs
https://github.com/mandiant/capa/
Apache License 2.0
537 stars 163 forks source link

rule: use of mnemonic: syscall #6

Closed Ana06 closed 3 years ago

Ana06 commented 4 years ago

@mr-tz

for example: https://www.solomonsklash.io/syscalls-for-shellcode-injection.html

williballenthin commented 3 years ago

closed in #375