ninadgowdru 9b81293a81 rule: graduate four rules from nursery ...

Fixes #1178 by moving the .NET time delay and three thread pool injection rules out of the nursery.

2026-08-31 19:30:33 +05:30

..

create

Split .NET features from windows file & process rules (#1130)

2026-03-12 11:41:24 -06:00

dump

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

inject

rule: graduate four rules from nursery

2026-08-31 19:30:33 +05:30

list

Improve Accuracy of Various Detections (#1010)

2025-03-10 14:19:23 -06:00

modify

new/updated rules from recent malware samples (#1063)

2025-08-12 10:21:05 -06:00

modules/list

use "span of calls" scope (#973)

2025-01-29 10:27:13 +01:00

terminate

terminate process with RestartMgr.RmShutdown (#1077)

2025-09-23 14:17:49 -06:00

get-process-filename.yml

get-process-filename.yml: added reference, corrected structure element

2024-10-18 19:09:05 +00:00

get-process-heap-flags.yml

get-process-heap-flags: use GetProcessHeap (#1184)

2026-08-14 14:55:43 -06:00

get-process-heap-force-flags.yml

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

map-section-object.yml

use "span of calls" scope (#973)

2025-01-29 10:27:13 +01:00