rule:
meta:
name: compress data using GZip in .NET
namespace: data-manipulation/compression
authors:
- michael.hunhoff@mandiant.com
scopes:
static: function
dynamic: call
att&ck:
- Collection::Archive Collected Data::Archive via Library [T1560.002]
mbc:
- Data::Compress Data [C0024]
features:
- or:
- api: System.IO.Compression.GZipStream::ctor
last edited: 2023-11-24 10:34:28