Commit Graph
2 Commits
Author SHA1 Message Date
Kevin Glynn eec1246fee fix: use explicit path for YARA rule in Volatility command
The --yara-file reference should not assume a specific working directory.
Use a placeholder path that analysts will substitute for their setup.
2026-07-16 17:16:09 -04:00
Kevin Glynn d4e38c2867 fix: reduce Windows Defender false positive on fileless malware skill
Add AV false-positive guidance for issue #100, move inline YARA rule to
references/yara-fileless-powershell.yar, and replace literal encoded
PowerShell payload with a placeholder in the sample report.
2026-07-16 17:08:46 -04:00