Saniya Fatima 9609e19ddb Powershell expression (#1118) ...

* Fix: Reduce the false positive in Powershell expression

* Enhance powershell execution detection

2026-02-23 13:51:19 -07:00

..

dotnet

Add rules for detecting donut-related features (#997)

2025-03-21 10:15:28 -06:00

pe

use "span of calls" scope (#973)

2025-01-29 10:27:13 +01:00

powershell

Powershell expression (#1118)

2026-02-23 13:51:19 -07:00

shellcode

Add RtlRegisterWait API to shellcode exec callback (#1094)

2025-12-29 10:20:58 -07:00

execute-jscript-via-vsaengine-in-dotnet.yml

Add rule execute-jscript-via-vsaengine-in-dotnet.yml (#1071)

2025-08-25 13:07:56 -06:00

execute-vbscript-javascript-or-jscript-in-memory.yml

upgrade rules using updated script

2023-11-24 11:34:28 +01:00