Files
capa-rules/nursery/get-dotnet-assembly-entry-point.yml
Mike Hunhoff 7a52b6f9c0 dotnet: adding new rules based on recent samples (#1082)
* dotnet: adding new rules based on recent samples
2025-11-07 08:39:46 +01:00

14 lines
300 B
YAML

rule:
meta:
name: get .NET assembly entry point
namespace: load-code/dotnet
authors:
- [email protected]
scopes:
static: function
dynamic: span of calls
features:
- and:
- format: dotnet
- property/read: System.Reflection.Assembly::EntryPoint