Sync capa rules submodule

capa-bot · capa-bot · commit 9234b33051f9 · 2025-05-28T20:44:44.000Z
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,7 +6,7 @@
 
 ### Breaking Changes
 
-### New Rules (21)
+### New Rules (22)
 
 - communication/socket/connect-socket moritz.raabe@mandiant.com joakim@intezer.com mrhafizfarhad@gmail.com
 - communication/socket/udp/connect-udp-socket mrhafizfarhad@gmail.com
@@ -28,6 +28,7 @@
 - exploitation/gadgets/load-ntoskrnl zdw@google.com
 - exploitation/gadgets/resolve-ntoskrnl-gadgets zdw@google.com
 - exploitation/spraying/make-suspicious-ntfscontrolfile-call zdw@google.com
+- anti-analysis/anti-forensic/unload-sysmon JakePeralta7
 -
 
 ### Bug Fixes
diff --git a/rules b/rules
@@ -1 +1 @@
-Subproject commit e6df4807586a1e69515f948a2d12fa87773220b0
+Subproject commit 834981fcfe085a22ab4ebefc7131fe858bac240c

-Original file line number
+Diff line change
 ### Breaking Changes
 -### New Rules (21)
 +### New Rules (22)
 - communication/socket/connect-socket [email protected] [email protected] [email protected]
 - communication/socket/udp/connect-udp-socket [email protected]
 - exploitation/gadgets/load-ntoskrnl [email protected]
 - exploitation/gadgets/resolve-ntoskrnl-gadgets [email protected]
 - exploitation/spraying/make-suspicious-ntfscontrolfile-call [email protected]
 +- anti-analysis/anti-forensic/unload-sysmon JakePeralta7
+-
 ### Bug Fixes