diff --git a/README.md b/README.md index 4afb841..72385f9 100644 --- a/README.md +++ b/README.md @@ -80,6 +80,10 @@ This repository is created as an online bookmark for useful links, resources and fireeye/capa capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing services, or relies on HTTP to communicate. + + fireeye/capa-rules + Standard collection of rules for capa: the tool for enumerating the capabilities of programs + jymchoeng/AutoTTP Automated Tactics Techniques & Procedures