search

mandiant / capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs
https://github.com/mandiant/capa/
Apache License 2.0
531 stars 160 forks source link

identify .NET single file bundles #841

Closed sara-rn closed 11 months ago

sara-rn commented 11 months ago

.NET single file deployments allow all the dependencies to be included in a single binary. Other capa rules might not be relevant for this single file bundles. Perhaps a warning could be displayed, same as for MSI. Additional information can be found in https://learn.microsoft.com/en-us/dotnet/core/deploying/single-file/overview?tabs=cli

google-cla[bot] commented 11 months ago

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

mr-tz commented 11 months ago

Cool, can you address the parsing/linter fail and then this should be good to go.

mr-tz commented 11 months ago

There's also packaged as single-file .NET application which we should consider as part of this update.

sara-rn commented 11 months ago

will create a new PR for this