Sync capa rules submodule

mandiant · Dec 3, 2024 · 83a4626 · 83a4626
1 parent 0c64bd4
commit 83a4626
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,7 +11,7 @@
 
 - remove support for Python 3.8 and use Python 3.10 as minimum now #1966 @mr-tz
 
-### New Rules (10)
+### New Rules (18)
 
 - nursery/get-shadow-password-file-entry-on-linux [email protected]
 - nursery/set-shadow-password-file-entry-on-linux [email protected]
@@ -23,6 +23,14 @@
 - nursery/persist-via-print-processors-registry-key [email protected]
 - linking/static/touchsocket/linked-against-touchsocket [email protected]
 - runtime/dotnet/compiled-with-dotnet-aot [email protected]
+- nursery/persist-via-errorhandler-script [email protected]
+- nursery/persist-via-get-variable-hijack [email protected]
+- nursery/persist-via-iphlpapi-dll-hijack [email protected]
+- nursery/persist-via-lnk-shortcut [email protected]
+- nursery/persist-via-powershell-profile [email protected]
+- nursery/persist-via-windows-accessibility-tools [email protected]
+- nursery/persist-via-windows-terminal-profile [email protected]
+- nursery/write-to-browser-extension-directory [email protected]
 -
 
 ### Bug Fixes

diff --git a/rules b/rules
+20 −0		nursery/persist-via-errorhandler-script.yml
+20 −0		nursery/persist-via-get-variable-hijack.yml
+20 −0		nursery/persist-via-iphlpapi-dll-hijack.yml
+20 −0		nursery/persist-via-lnk-shortcut.yml
+22 −0		nursery/persist-via-powershell-profile.yml
+27 −0		nursery/persist-via-windows-accessibility-tools.yml
+21 −0		nursery/persist-via-windows-terminal-profile.yml
+22 −0		nursery/write-to-browser-extension-directory.yml