my notes about mandiant/capa

i've recently found mandiant/capa (https://github.com/mandiant/capa) tool and it's very useful! basically this little piece of software is a checker that looks for strings, functions and libraries in an artifact, and correlates them with a set of rules (aka "capa rules", like yara - that are customizable too!) that can give you hints about the... Weiterlesen: my notes about mandiant/capa