timb-machine / timb-machine/linux-malware

[Intel]: canvasspectre.yara

Open
#284 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

missing:tactics new
Dominant language
HTML
Stars
1.2k
Forks
95
PR merge metrics
No merged PRs in 30d

Description

Area

Personal rules

Parent threat

No response

Finding

canvasspectre.yara

Industry reference

Hunts for CANVAS Spectre

Malware reference

No response

Actor reference

No response

Component

No response

Scenario

No response

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating canvasspectre.yara and reviewing how personal rules are organized in this repository. Confirm the expected coverage for CANVAS Spectre from the issue’s industry reference, then ensure the finished rule is added in the appropriate location and can be submitted as a pull request.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.