mandiant / mandiant/capa

dotnet: consider adding support for "object" or "type" scope

Open
#1,259 0 comments 0 reactions 0 assignees View on GitHub
dotnet enhancement
Dominant language
Python
Stars
6.2k
Forks
726
Avg merge
11d 11h
Merged PRs (30d)
7

Description

e.g. detecting service classes using something like

```yaml
- type:
- extends: System.ServiceProcess.ServiceBase
- optional:
- api: OnStart
- api: OnStop
- api: OnPause
- api: OnContinue
```
doc: https://learn.microsoft.com/en-us/dotnet/api/system.serviceprocess.servicebase?view=dotnet-plat-ext-7.0

Contributor guide

Open the contributing guide

Research direction

Start by tracing the existing YAML rule parsing and scope-matching path for the proposed `type` or `object` scope, then compare it with the ServiceBase example in the issue. Done means the supported scope is defined, the example rule can detect the intended service classes and methods, and coverage is validated by the project's tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp, python
Domain
reverse-engineering
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.