Skip to content

Split .NET features from windows file & process rules#1130

Merged
mike-hunhoff merged 9 commits intomandiant:masterfrom
CosmoWorker:sep-net-windows
Mar 12, 2026
Merged

Split .NET features from windows file & process rules#1130
mike-hunhoff merged 9 commits intomandiant:masterfrom
CosmoWorker:sep-net-windows

Conversation

@CosmoWorker
Copy link
Contributor

Addresses remaining 3 files in #710

  • Extracts .NET features from read, write & process windows rules.
  • Migrates test sample (692f7fd198e804...) to new rule to pass lints & maintain test coverage.
  • Passes all lint checks with no failure.
fin-capa-image

Closes #710

Copy link
Collaborator

@mike-hunhoff mike-hunhoff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @CosmoWorker , I've left comments for your review.

@mike-hunhoff mike-hunhoff merged commit 03a20f6 into mandiant:master Mar 12, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

limit use of OS-specifics in .NET rules e.g. "... on Windows"

2 participants