mandiant / mandiant/capa-rules
find rule candidates from stackoverflow
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 736
- Forks
- 245
- Avg merge
- 4d 53m
- Merged PRs (30d)
- 2
Description
use the stackoverflow snapshot databases to extract MSDN API functions commonly (or not) recommended in answers but not yet referenced by any capa rule.
this can help suggest categories of rules not yet considered or address coverage in the existing rules.
create a script to dump the top recommendations, using things like question title, question tag, votes, etc. to rank.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by examining the Stack Overflow snapshot databases and the existing capa rule collection to understand how API functions are represented and referenced. Build the requested script around question titles, tags, and votes, then verify that its output ranks MSDN API recommendations absent from current rules and highlights potential rule categories or coverage gaps.
Written by the indexing model from the issue text.
Assessment
- Domain
- data-engineering, reverse-engineering
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100