Detection Rule List

Rule Name	Rule Type	Technique Count	Creation Date
CAPA_Check_ICEBP	CAPA	1	5 months
CAPA_NtQueryInformation	CAPA	1	5 months
CAPA_Trap_Flag	CAPA	1	5 months
CAPA_Software_Breakpoint	CAPA	1	5 months
YARA_Detect_EventLogTampering	YARA	1	5 months
YARA_Detect_FindWindow	YARA	1	5 months, 1 week
YARA_Detect_LocalSize	YARA	1	5 months, 1 week
YARA_Detect_RDTSC	YARA	1	5 months, 1 week
YARA_Detect_NtQueryInformationProcess	YARA	1	5 months, 1 week
YARA_Detect_NtSetInformationThread	YARA	1	5 months, 1 week
YARA_Detect_NtQueryObject	YARA	1	5 months, 1 week
Yara_Detect_OutputDebugString	YARA	1	5 months, 1 week
YARA_Detect_EventPairHandles	YARA	1	5 months, 1 week
YARA_Detect_CsrGetProcessID	YARA	1	5 months, 1 week
YARA_Detect_CloseHandle	YARA	1	5 months, 1 week
Detect_EnumProcess	YARA	1	5 months, 1 week
YARA_Detect_ExceptionHandler	YARA	1	5 months, 1 week
Detect_Interrupts	YARA	3	5 months, 1 week
Detect_OllyDbg_BadFormat_Trick	YARA	1	5 months, 1 week
YARA_Detect_GuardPages	YARA	1	5 months, 1 week
YARA_Detect_IsDebuggerPresent	YARA	1	5 months, 1 week
YARA_Detect_SetDebugFilterState	YARA	1	5 months, 1 week
YARA_Detect_SuspendThread	YARA	1	5 months, 1 week
YARA_detect_tlscallback	YARA	1	5 months, 1 week
YARA_DebuggerCheck_GlobalFlags	YARA	1	5 months, 1 week
YARA_wiping_event	YARA	0	5 months, 1 week
YARA_DebuggerCheck__RemoteAPI	YARA	0	5 months, 1 week
YARA_Detect_AntiVMWithTemperature	YARA	0	5 months, 1 week
YARA_QEMU_REGISTRY	YARA	1	5 months, 1 week
YARA_Detect_Possible_GetForegroundWindow_Evasion	YARA	0	5 months, 1 week