v4.0.0
Summary
Added: 20 rules
Modified: 36 rules
Renamed: 1 rule
Deleted: 1 rule
Detailed release changes: rules v3.2.1...v4.0.0
Added rules (20)
- anti-analysis/obfuscation/obfuscated-with-babel-obfuscator.yml
- anti-analysis/obfuscation/obfuscated-with-deepsea-obfuscator.yml
- anti-analysis/obfuscation/obfuscated-with-dotfuscator.yml
- anti-analysis/obfuscation/obfuscated-with-smartassembly.yml
- anti-analysis/obfuscation/obfuscated-with-spicesdotnet-obfuscator.yml
- anti-analysis/obfuscation/obfuscated-with-yano.yml
- nursery/check-clipboard-data.yml
- nursery/clear-clipboard-data.yml
- nursery/compile-dotnet-assembly.yml
- nursery/create-process-via-wmi.yml
- nursery/display-service-notification-message-box.yml
- nursery/find-process-by-name.yml
- nursery/generate-random-numbers-in-dotnet.yml
- nursery/hash-data-using-jshash.yml
- nursery/hash-data-using-rshash.yml
- nursery/send-keystrokes.yml
- nursery/send-request-in-dotnet.yml
- nursery/terminate-process-by-name-in-dotnet.yml
- persistence/authentication-process/act-as-credential-manager-dll.yml
- persistence/authentication-process/act-as-password-filter-dll.yml
Modified rules (36)
- anti-analysis/packer/themida/packed-with-themida.yml
- communication/http/client/create-http-request.yml
- communication/http/client/download-url.yml
- communication/http/client/read-data-from-internet.yml
- communication/http/server/start-http-server.yml
- communication/socket/send/send-data-on-socket.yml
- compiler/ps2exe/compiled-with-ps2exe.yml
- data-manipulation/encoding/base64/encode-data-using-base64.yml
- data-manipulation/hashing/md5/hash-data-with-md5.yml
- data-manipulation/hashing/sha256/hash-data-using-sha256.yml
- host-interaction/cli/accept-command-line-arguments.yml
- host-interaction/clipboard/read-clipboard-data.yml
- host-interaction/clipboard/write-clipboard-data.yml
- host-interaction/file-system/files/list/enumerate-files-recursively.yml
- host-interaction/file-system/meta/get-file-attributes.yml
- host-interaction/file-system/meta/get-file-version-info.yml
- host-interaction/file-system/meta/set-file-attributes.yml
- host-interaction/file-system/read/read-file-on-windows.yml
- host-interaction/file-system/write/write-file-on-windows.yml
- host-interaction/hardware/storage/enumerate-disk-properties.yml
- host-interaction/mutex/check-mutex.yml
- host-interaction/network/interface/get-networking-interfaces.yml
- host-interaction/process/create/create-process-on-windows.yml
- host-interaction/process/list/find-process-by-pid.yml
- host-interaction/process/terminate/terminate-process.yml
- host-interaction/registry/create-or-open-registry-key.yml
- host-interaction/registry/delete/delete-registry-value.yml
- host-interaction/registry/query-or-enumerate-registry-value.yml
- host-interaction/session/get-session-integrity-level.yml
- host-interaction/session/get-session-user-name.yml
- host-interaction/thread/create/create-thread.yml
- host-interaction/thread/resume/resume-thread.yml
- host-interaction/thread/suspend/suspend-thread.yml
- host-interaction/thread/terminate/terminate-thread.yml
- nursery/invoke-dotnet-assembly-method.yml
- runtime/dotnet/compiled-to-the-dotnet-platform.yml
Renamed rules (1)
- host-interaction/file-system/files/list/enumerate-files-on-windows.yml (was host-interaction/file-system/files/list/enumerate-files-via-ntdll-functions.yml)