Skip to content

Pull requests: CAPESandbox/community

New pull request New
14 Open 504 Closed
14 Open 504 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Reduce severity and confidence levels in mountpoints
#539 opened Mar 2, 2026 by kevross33 Loading…
4
Add MalformedDllLoading signature for DLL checks
#538 opened Feb 28, 2026 by kevross33 Loading…
5
Add Queue APC injection signature
#537 opened Feb 28, 2026 by kevross33 Loading…
4
Create bypass_edr_syscalls.py for direct syscalls evasion
#536 opened Feb 28, 2026 by kevross33 Loading…
5
Create sig for likely ransomware asynchronous encryption
#535 opened Feb 28, 2026 by kevross33 Loading…
5
Add ransomware detection signatures for file access
#534 opened Feb 28, 2026 by kevross33 Loading…
8
Fix ransomware message and add new mass note placement sig
#533 opened Feb 27, 2026 by kevross33 Loading…
3
Add ransomware extension hijacking detection signature
#532 opened Feb 24, 2026 by kevross33 Loading…
4
Add KernelCryptoDriverAbuse signature for ransomware detection
#531 opened Feb 24, 2026 by kevross33 Loading…
5
Sig for installing kernel service driver
#529 opened Feb 23, 2026 by kevross33 Loading…
7
Add folder enumeration signature for ransomware detection
#527 opened Feb 23, 2026 by kevross33 Loading…
5
Add DecompressEXE signature for memory analysis
#523 opened Feb 5, 2026 by kevross33 Loading…
6
Bypass EDR NTDLL sigs (memory modification & freshload) working
#521 opened Dec 29, 2025 by kevross33 Loading…
9
Create signature for DLL sideloading
#504 opened Sep 18, 2025 by kevross33 Loading…
4
ProTip! Adding no:label will show everything without a label.