v0.13.2
Release v0.13.2
What's Changed
Loads of false-positive reduction:
- Reduce CRITICAL Python false positives, particularly setuptools based rules by @tstromberg in #276
- Reduce false-positives in "rename_os" Python rule by @tstromberg in #277
- Remove rot13_str_replace, lower criticality of base64_str_replace by @tstromberg in #278
- Remove Kiteshield false negatives by @egibs in #293
- Remove false negative hashes from rules by @tstromberg in #294
- Rule hash update by @tstromberg in #295
- Update known matching malware hashes by @tstromberg in #296
- Remove remaining false negatives by @egibs in #297
- Turn off MALPEDIA_Win_Unidentified_107_Auto rule by @egibs in #298
- Resolve eval false-positive for gawk by @egibs in #301
- Resolve datadog-agent DDOS false positive by @egibs in #299
- Update 3rd party YARA rules with 'make update-third-party' by @tstromberg in #305
- Add separate rule for mkstemp paths in /dev/shm by @egibs in #302
- Tweak password_finder_mimipenguin rule by @egibs in #303
- Resolve datadog-agent kworker false positives by @egibs in #300
Full Changelog: v0.13.1...v0.13.2