Commit 33df5d40 by Frank Poz

Create Capabilities ruleset

The Capabilities ruleset contains rules that do not fit into one
of the other categories but are useful information for analysis.
The initial rules are those from the AntiDebug AntiVM ruleset that
are not related to anti-analysis techniques.

Fixes #316
parent 8130cda6
......@@ -32,6 +32,10 @@ Also, you will need [Androguard Module](https://github.com/Koodous/androguard-ya
In this section you will find Yara Rules aimed toward the detection of anti-debug and anti-virtualization techniques used by malware to evade automated analysis.
## Capabilities
In this section you will find Yara rules to detect capabilities that do not fit into any of the other categories. They are useful to know for analysis but may not be malicious indicators on their own.
## CVE_Rules
In this section you will find Yara Rules specialised toward the identification of specific Common Vulnerabilities and Exposures (CVEs)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment