search

mandiant / capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs
https://github.com/mandiant/capa/
Apache License 2.0
514 stars 157 forks source link

Rules to find interesting code #898

Open mr-tz opened 3 months ago

mr-tz commented 3 months ago

https://synthesis.to/presentations/recon23_code_detection.pdf (pp. 10) provides an overview of general noteworthy code parts. We cover some already but could write more rules or add characteristics for some here.