Skip to content

Issues: chainguard-dev/malcontent

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

19 Open 105 Closed
19 Open 105 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

VirusTotal YARA-CI - false negatives found
#460 opened Sep 16, 2024 by tstromberg
Add "filetypes" metadata to rules
#454 opened Sep 15, 2024 by tstromberg
3
Add MITRE ATT&CK metadata to rules
#453 opened Sep 15, 2024 by tstromberg
Add MBC (Malware Behavior Catalog) metadata to rules
#452 opened Sep 15, 2024 by tstromberg
Measure if "threat_hunting" ruleset is worth the CPU cost
#451 opened Sep 15, 2024 by tstromberg
Support bincapz configuration via environment variable or file enhancement New feature or request
#447 opened Sep 12, 2024 by egibs
Better handling of questionable false-positives enhancement New feature or request false-positive This rule has false positives
#414 opened Aug 19, 2024 by egibs
1
Ideate on selectively compiling rules based on the scanned paths
#382 opened Jul 27, 2024 by egibs
1
Allow for paths to be excluded from scanning.
#381 opened Jul 27, 2024 by egibs
Add detection for kSpreader artifacts
#327 opened Jul 5, 2024 by tstromberg
@tstromberg
Add detection for kubo/injector
#325 opened Jul 4, 2024 by tstromberg
Add detection for Medusa preload
#324 opened Jul 4, 2024 by tstromberg
false positive: teleport marked CRITICAL due to multiple high risk behaviors
#320 opened Jul 3, 2024 by tstromberg
2
false positive: docker as CRITICAL due to multiple HIGH risk items
#319 opened Jul 3, 2024 by tstromberg
Add kworker masquerade samples to validate fake-process-name.yara
#306 opened Jul 1, 2024 by tstromberg
Create DEVELOPMENT.md documentation Improvements or additions to documentation
#233 opened May 21, 2024 by tstromberg
6 tasks
Support transparent decompression of UPX'd binaries enhancement New feature or request
#197 opened May 8, 2024 by tstromberg
v1.0.0 release blockers
#173 opened Apr 29, 2024 by tstromberg
4 of 5 tasks
5
Elastic Defend flags bincapz as multiple forms of macOS malware (false-positive) bug Something isn't working
#78 opened Mar 29, 2024 by tstromberg
1
ProTip! Mix and match filters to narrow down what you’re looking for.