#supply #chain #attack #detection

Extracted Yara rules from Windows Defender mpavbase and mpasbase

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

A living guide to lesser-known and evasive Windows API abuses used in malware, with practical reverse engineering notes, YARA detections, and behavioral indicators.