Skip to content

Pull requests: mandiant/capa-rules

New pull request New
8 Open 720 Closed
8 Open 720 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

rules: add QUIC / msquic detection rule
#1108 opened Jan 28, 2026 by AdityaSkhorne Loading…
5
add WinSock variants for UDP socket creation
#1104 opened Jan 25, 2026 by AdityaSkhorne Loading…
1
add WinSock variants for TCP socket creation
#1103 opened Jan 25, 2026 by AdityaSkhorne Loading…
2
feat(targeting): add cloud and container collection/interaction rules
#1098 opened Jan 19, 2026 by Maijin Loading…
5
Rename architecture-specific rules and update rule names inside YAML files
#1011 opened Feb 28, 2025 by akh7177 Loading…
1
44
Improve Screenshot Detection by Modifying capture-screenshot.yml
#1007 opened Feb 24, 2025 by akh7177 Loading…
1
19
warn if latest release and rules are not compatible
#933 opened Sep 24, 2024 by mr-tz Loading…
Additional rules to support capa-scripts. dont merge Indicate a PR that is still being worked on
#603 opened Aug 4, 2022 by adamstorek Loading…
19
ProTip! Exclude everything labeled bug with -label:bug.