mandiant / capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs
https://github.com/mandiant/capa/
Apache License 2.0
531 stars 160 forks source link

updated .NET bundled rule and file limitation #847

Closed sara-rn closed 11 months ago

sara-rn commented 11 months ago

added 2 new rules, one in internal/limitation/file and another one in executable/dotnet-singlefile instead of installer/dotnet. Existing rule in installer/dotnet has been also moved to executable/dotnet-singlefile. This way there is a specific file limitation rule for .net single-file application applications and the description is more accurate.