Skip to content

Commit

Permalink
Monitor updates: see changelog for details
Browse files Browse the repository at this point in the history
  • Loading branch information
kevoreilly committed Dec 31, 2024
1 parent ded48c6 commit 4f2a06c
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 0 deletions.
Binary file modified analyzer/windows/dll/capemon.dll
Binary file not shown.
Binary file modified analyzer/windows/dll/capemon_x64.dll
Binary file not shown.
8 changes: 8 additions & 0 deletions changelog.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,11 @@
### [31.12.2024]
* Monitor updates:
* CoGetClassObject hook: add inspect_clsid for improved injection (e.g. 38a9847cb5ce4918bdfee2d54d5d3b79e1399cce15c7b68d86e8f0a5f48e3131)
* SetFileInformationByHandle hook
* GetComputerNameExW hook: add fake results for all NameTypes (e.g. 8056b8ff55c452cc87e35d69928cccbcfc5af848db1abb4fe0364510986e068b)
* RmStartSession hook (thanks para0x0dise)
* LdrpCallInitRoutine hook for Win10+

### [01.11.2024] Parsers
* Malware config parsers aka parsers are moved out of core of CAPE.
* Now they are at their own [repository](https://github.com/CAPESandbox/CAPE-parsers).
Expand Down

0 comments on commit 4f2a06c

Please sign in to comment.