Repository Issues

mandiant/capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

View on GitHub
Stars
 (721 stars)
Forks
 (234 forks)
Indexed issues
 (16 indexed issues)
open beginner issues
 (0 open beginner issues)
Latest indexed
Jul 15, 2026
Last GitHub push
May 22, 2026
License
Apache License 2.0
Contributing guide
Contributing guide
Code of conduct
No code of conduct
Dominant language
No language data
PR merge metrics
 (PR metrics pending)
Beginner labels
No beginner labels indexed

Issues

16 open indexed issues

RSSAtom
Open
persist via Windows service
false positivegood first issuehelp wanted

mandiant/capa-rules #1,100 opened Jan 22, 2026 · 721 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
2 comments0 reactions0 assignees
Open
false negative for screenshot
false negativegood first issuehelp wanted

mandiant/capa-rules #981 opened Jan 17, 2025 · 721 stars

Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
7 comments0 reactions1 assignee
Open
detect socks5 proxy capabilities
good first issuehelp wantedrule idea

mandiant/capa-rules #971 opened Dec 6, 2024 · 721 stars

Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
15 comments2 reactions1 assignee
Open
detect BITS usage in general
good first issuerule idea

mandiant/capa-rules #967 opened Nov 25, 2024 · 721 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
3 comments0 reactions0 assignees
Open
HardHat C2 Detections
good first issuerule idea

mandiant/capa-rules #742 opened Mar 31, 2023 · 721 stars

Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
2 comments0 reactions1 assignee
Open
detect uncommon .NET entry points
good first issuerule idea

mandiant/capa-rules #725 opened Mar 16, 2023 · 721 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
1 comment3 reactions0 assignees
Open
check .NET-Anti-Debug coverage
good first issuerule idea

mandiant/capa-rules #596 opened Jul 22, 2022 · 721 stars

Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
8 comments0 reactions2 assignees
Open
hijack KernelCallBack table
good first issuerule idea

mandiant/capa-rules #528 opened Feb 1, 2022 · 721 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
2 comments0 reactions0 assignees
Open
rule idea: zlib fast inflate
good first issuerule idea

mandiant/capa-rules #494 opened Nov 4, 2021 · 721 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
2 comments0 reactions0 assignees
Open
HttpQueryInfo and options
good first issue

mandiant/capa-rules #3 opened Jun 25, 2020 · 721 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
3 comments0 reactions0 assignees