Detection Rule List

Rule Name Rule Type Technique Count Creation Date
CAPA_Detect_vmprotect CAPA 1 2 years, 5 months
CAPA_Detect_Petite CAPA 1 2 years, 5 months
CAPA_Detect_Themida CAPA 1 2 years, 5 months
CAPA_Detect_PeCompact CAPA 1 2 years, 5 months
CAPA_Detect_NSpack CAPA 1 2 years, 5 months
ASPack Packer Detection CAPA 1 2 years, 5 months
UPX Packer Detection CAPA 1 2 years, 5 months
CAPA_Detect_QEMU CAPA 0 2 years, 5 months
Check Sandbox Process CAPA 1 2 years, 5 months
Detect File Melt CAPA 1 2 years, 5 months
CAPA_Detect_Timestomp CAPA 1 2 years, 5 months
CAPA_FileVersion_Impersonation CAPA 1 2 years, 5 months
CAPA_check_PPID CAPA 1 2 years, 5 months
Check ICEBP CAPA 1 2 years, 5 months
CAPA_NtQueryInformation CAPA 1 2 years, 5 months
CAPA_Trap_Flag CAPA 1 2 years, 5 months
CAPA_Software_Breakpoint CAPA 1 2 years, 5 months
YARA_Detect_EventLogTampering YARA 1 2 years, 5 months
YARA_Detect_FindWindow YARA 1 2 years, 5 months
YARA_Detect_LocalSize YARA 1 2 years, 5 months
YARA_Detect_RDTSC YARA 1 2 years, 5 months
YARA_Detect_NtQueryInformationProcess YARA 1 2 years, 5 months
YARA_Detect_NtSetInformationThread YARA 1 2 years, 5 months
YARA_Detect_NtQueryObject YARA 1 2 years, 5 months
Yara_Detect_OutputDebugString YARA 1 2 years, 5 months
YARA_Detect_EventPairHandles YARA 1 2 years, 5 months
YARA_Detect_CsrGetProcessID YARA 1 2 years, 5 months
YARA_Detect_CloseHandle YARA 1 2 years, 5 months
Detect_EnumProcess YARA 1 2 years, 5 months
YARA_Detect_ExceptionHandler YARA 1 2 years, 5 months

Filter