Skip to content
Navigation Menu
Toggle navigation
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Spark
Build and deploy intelligent apps
GitHub Models
Manage and compare prompts
MCP Registry
New
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search or jump to...
Search code, repositories, users, issues, pull requests...
Search syntax tips
Provide feedback
Saved searches
Use saved searches to filter your results more quickly
Sign in
Sign up
Appearance settings
Resetting focus
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
mandiant
/
capa-rules
Public
Notifications
You must be signed in to change notification settings
Fork
230
Star
703
Code
Issues
119
Pull requests
18
Discussions
Actions
Wiki
Security
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Wiki
Security
Insights
Insights: mandiant/capa-rules
Pulse
Contributors
Community standards
Commits
Code frequency
Dependency graph
Network
Forks
Forks
switch to list view
mandiant
/
capa-rules
0ameyasr
/
capa-rules
0x534a
/
capa-rules
0x7C000
/
capa-rules-Mandiant
0xRavenspar
/
capa-rules
0xx0d4y
/
capa-rules
7lym
/
capa-rules
a111b111
/
capa-rules
Aayush-Goel-04
/
capa-rules
Abtaha
/
capa-rules
acealchemycyberblaze
/
capa-rules
acelynnzhang
/
capa-rules
adamstorek
/
capa-rules
AdityaSkhorne
/
capa-rules
aeae995
/
capa-rules
agithubuserlol
/
capa-rules
akh7177
/
capa-rules
akshat4703
/
capa-rules
ALEHACKsp
/
capa-rules
alx1m1k
/
capa-rules
Ana06
/
capa-rules
AnasRm01
/
capa-rules
anders-v
/
capa-rules
AndreC10002
/
capa-rules
ANONYMOUSLGD
/
capa-rules
anushkavirgaonkar
/
capa-rules
ArkaprabhaChakraborty
/
capa-rules
aryanyk
/
capa-rules
askme765cs
/
capa-rules
aussieklutz
/
capa-rules
BBG-QX
/
capa-rules
Bhairvi23
/
capa-rules
BitsOfBinary
/
capa-rules
cephurs
/
capa-rules
bkojusner
/
capa-rules
BlackJack0
/
capa-rules
Blue-infosec
/
capa-rules
bravery9
/
capa-rules
c0axial
/
capa-rules
cadmius
/
capa-rules
canaankao
/
capa-rules
captainGeech42
/
capa-rules
ccDev-Labs
/
capa-rules
cdong1012
/
capa-rules
certego
/
capa-rules
ChaitanyaHaritash
/
capa-rules
chazzrobbz
/
capa-rules
chubbymaggie
/
capa-rules
cikgufatah
/
capa-rules
cipherBT
/
capa-rules
clayne
/
capa-rules
colton-gabertan
/
capa-rules
CosmoWorker
/
capa-rules-vt
cowby123
/
capa-rules
CrackerCat
/
capa-rules
crowface28
/
capa-rules
cssxn
/
capa-rules
cudeso
/
capa-rules
cwakil17
/
capa-rules
dannyquist
/
capa-rules
debugactiveprocess
/
capa-rules
devarjya27
/
capa-rules
devs6186
/
capa-rules
dhruvak001
/
capa-rules
dkelly2e
/
capa-rules
dmex
/
capa-rules
Domninc22
/
capa-rules
drfuzzer
/
capa-rules
dvntaudio
/
capa-rules
dzbeck
/
capa-rules
EclipseAditya
/
capa-rules
EGAO57115
/
capa-rules
ejfocampo
/
capa-rules
ekmixon
/
capa-rules
elad-levi-cyberark
/
capa-rules
ellen2015
/
capa-rules
emtuls
/
capa-rules
erhlee-bird
/
capa-rules
evandowning
/
capa-rules
EvilAres
/
capa-rules
f0r3ns1cat0r
/
capa-rules
Familyye
/
capa-rules
fariss
/
capa-rules
franciscobadaro
/
capa-rules
fxb-cocacoding
/
capa-rules
fxcebx
/
capa-rules
gleeda
/
capa-rules
gmh5225
/
rules-capa-rules
GTISC
/
capa-rules
gunjin1
/
capa-rules
hafizfarhad
/
capa-rules
Harsh1s
/
capa-rules
HavocLabs
/
capa-rules
hecg119
/
capa-rules
henrythanhtran
/
capa-rules
htnhan
/
capa-rules
hzdwang
/
capa-rules
i1337m
/
capa-rules
idiom
/
capa-rules
IlyasOsman
/
capa-rules
intezer
/
capa-rules
isimsizolan
/
capa-rules
itsreallynick
/
capa-rules
j-chacko
/
capa-rules
j0n3z
/
capa-rules
JakePeralta7
/
capa-rules
jaredscottwilson
/
capa-rules
jaxxpnd
/
capa-rules
jimoyong
/
capa-rules
jlepore-fe
/
capa-rules
jlmndt
/
capa-rules
johnk3r
/
capa-rules
jorik-utwente
/
capa-rules
joseguzman1337
/
capa-rules
joshualeejunyi
/
capa-rules
jotdevelopers
/
capa-rules
jsarracino
/
capa-rules
jtothej
/
capa-rules
kakashi-1337
/
capa-rules
kami922
/
capa-rules
kevinru2023
/
capa-rules
kevross33
/
capa-rules
killvxk
/
capa-rules-mandiant
Kirsten0604
/
capa-rules
kn0wl3dge
/
capa-rules
komen205
/
capa-rules
kulinacs
/
capa-rules
linpeiyu164
/
capa-rules
litchi125
/
capa-rules
lnaphade
/
capa-rules
Maijin
/
capa-rules
MalwareMechanic
/
capa-rules
marcosd4h
/
capa-rules
mbcdev
/
capa-rules
MBCProject
/
capa-rules-1
cs-cognitome
/
capa-rules-1
D00MINATI
/
capa-rules-1
jesusgavancho
/
capa-rules-1
korb-daven
/
capa-rules-1
Kramarus
/
capa-rules-1
OperatorCRNVL
/
capa-rules-1
pentestfunctions
/
capa-rules-1
ravikrishnaa
/
capa-rules-1
RedGh0st1
/
capa-rules-1
sertralline
/
capa-rules-1
Webzyking
/
capa-rules-1
XoomiHu
/
capa-rules-1
miteshw05
/
capa-rules
mr-tz
/
capa-rules
msanchit-dev
/
capa-rules
mustafagunel
/
capa-rules
naikordian
/
capa-rules
neuexg
/
capa-rules
Nitezio
/
capa-rules
obe1datt
/
capa-rules
ooprathamm
/
capa-rules
Or4nZii
/
capa-rules
OriginalPwnster
/
capa-rules
OZoneSQT
/
capa-rules
PinGMUICT
/
capa-rules
pombredanne
/
capa-rules
PrajeetGuha
/
capa-rules
priyank766
/
capa-rules
psahithireddy
/
capa-rules
pyNpy
/
capa-rules
qfadlan
/
capa-rules
quietprofessional2jz
/
capa-rules
radizzle
/
capa-rules
RakhithJK
/
capa-rules
ramen0x3f
/
capa-rules
rand-tech
/
capa-rules
ratatoskr47
/
capa-rules
raymondlleong
/
capa-rules
re-fox
/
capa-rules
recvfrom
/
capa-rules
RedScarf1005
/
capa-rules
ReversingWithMe
/
capa-rules
reyyanxahmed
/
capa-rules
ricanwarfare
/
capa-rules
richardweiss80
/
capa-rules
RonnieSalomonsen
/
capa-rules
ruppde
/
capa-rules
ryanbekabe
/
capa-rules
SAMurai-16
/
capa-rules
saniyafatima07
/
capa-rules
SavoBit
/
capa-rules
ScorpionRE
/
capa-rules
securityguy
/
capa-rules
securitywarrior
/
capa-rules
Shaktisinhchavda
/
capa-rules
sherkhanz
/
capa-rules
Silentsoul04
/
capa-rules
SkyBulk
/
capa-rules
smallzhong
/
capa-rules
snigdhachoudhury
/
capa-rules
socketz
/
capa-rules
stevemk14ebr
/
capa-rules
Still34
/
capa-rules
sudesh0sudesh
/
capa-rules
TakahiroHaruyama
/
capa-rules
tarterp
/
capa-rules
TcM1911
/
capa-rules
techris45
/
capa-rules
teixeira0xfffff
/
capa-rules
tevjd
/
capa-rules
tgwrite
/
fork_capa-rules
timb-machine-mirrors
/
mandiant-capa-rules
tomfansdwdf
/
capa-rules
toomanybananas
/
capa-rules
Trietptm-on-Coding-Algorithms
/
capa-rules
tstromberg
/
capa-rules
unic0rn-team
/
capa-rules
v1bh475u
/
capa-rules
VAN1LLAG0RILLA
/
capa-rules
varshavkumar12345
/
capa-rules
vee1e
/
capa-rules
virenca
/
capa-rules
warm-regards
/
capa-rules
weifangpp
/
capa-rules
wrexecutor
/
capa-rules
xets007
/
capa-rules
xpzhxhm
/
capa-rules
xunairahbalouch
/
capa-rules
xxxx-dddd
/
capa-rules
xzwl233
/
capa-rules
yelhamer
/
capa-rules
youngjun-chang
/
capa-rules
yt0ng
/
capa-rules
zdwg42
/
capa-rules
zeze-zeze
/
capa-rules
zhangzongchen
/
capa-rules
You can’t perform that action at this time.