Revert non-x86-specific rules to original names and correctly mark x86 rules

akh7177 · akh7177 · commit a87eb3e9a792 · 2025-02-28T22:32:12.000+05:30
diff --git a/anti-analysis/anti-forensic/patch-process-command-line.yml b/anti-analysis/anti-forensic/patch-process-command-line.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: patch process command line via x86 assembly
+    name: patch process command line
     namespace: anti-analysis/anti-forensic
     authors:
       - william.ballenthin@mandiant.com
diff --git a/data-manipulation/checksum/crc32/hash-data-with-crc32.yml b/data-manipulation/checksum/crc32/hash-data-with-crc32.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: hash data with CRC32 via x86 assembly
+    name: hash data with CRC32
     namespace: data-manipulation/checksum/crc32
     authors:
       - moritz.raabe@mandiant.com
diff --git a/data-manipulation/compression/decompress-data-using-aplib.yml b/data-manipulation/compression/decompress-data-using-aplib.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: decompress data using aPLib via x86 assembly
+    name: decompress data using aPLib
     namespace: data-manipulation/compression
     authors:
       - "@r3c0nst (Frank Boldewin)"
diff --git a/data-manipulation/compression/decompress-data-using-ucl.yml b/data-manipulation/compression/decompress-data-using-ucl.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: decompress data using UCL via x86 assembly
+    name: decompress data using UCL
     namespace: data-manipulation/compression
     authors:
       - jakub.jozwiak@mandiant.com
diff --git a/data-manipulation/encoding/base64/decode-data-using-base64-via-dword-translation-table.yml b/data-manipulation/encoding/base64/decode-data-using-base64-via-dword-translation-table.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: decode data using Base64 via dword translation table via x86 assembly
+    name: decode data using Base64 via dword translation table
     namespace: data-manipulation/encoding/base64
     authors:
       - gilbert.elliot@mandiant.com
diff --git a/data-manipulation/encryption/aes/manually-build-aes-constants.yml b/data-manipulation/encryption/aes/manually-build-aes-constants.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: manually build AES constants via x86 assembly
+    name: manually build AES constants
     namespace: data-manipulation/encryption/aes
     authors:
       - huynh.t.nhan@gmail.com
diff --git a/data-manipulation/encryption/hc-128/encrypt-data-using-hc-128-via-wolfssl.yml b/data-manipulation/encryption/hc-128/encrypt-data-using-hc-128-via-wolfssl.yml
@@ -1,7 +1,7 @@
 # generated using capa explorer for IDA Pro
 rule:
   meta:
-    name: encrypt data using HC-128 via WolfSSL via x86 assembly
+    name: encrypt data using HC-128 via WolfSSL
     namespace: data-manipulation/encryption/hc-128
     authors:
       - blaine.stancill@mandiant.com
diff --git a/data-manipulation/encryption/hc-128/encrypt-data-using-hc-128.yml b/data-manipulation/encryption/hc-128/encrypt-data-using-hc-128.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt data using HC-128 via x86 assembly
+    name: encrypt data using HC-128
     namespace: data-manipulation/encryption/hc-128
     authors:
       - awillia2@cisco.com
diff --git a/data-manipulation/encryption/sosemanuk/encrypt-data-using-sosemanuk.yml b/data-manipulation/encryption/sosemanuk/encrypt-data-using-sosemanuk.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt data using Sosemanuk via x86 assembly
+    name: encrypt data using Sosemanuk
     namespace: data-manipulation/encryption/sosemanuk
     authors:
       - awillia2@cisco.com
diff --git a/data-manipulation/encryption/tea/decrypt-data-using-tea.yml b/data-manipulation/encryption/tea/decrypt-data-using-tea.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: decrypt data using TEA via x86 assembly
+    name: decrypt data using TEA
     namespace: data-manipulation/encryption/tea
     authors:
       - william.ballenthin@mandiant.com
diff --git a/data-manipulation/encryption/tea/encrypt-data-using-tea.yml b/data-manipulation/encryption/tea/encrypt-data-using-tea.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt data using TEA via x86 assembly
+    name: encrypt data using TEA
     namespace: data-manipulation/encryption/tea
     authors:
       - william.ballenthin@mandiant.com
diff --git a/data-manipulation/encryption/xxtea/encrypt-data-using-xxtea.yml b/data-manipulation/encryption/xxtea/encrypt-data-using-xxtea.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: encrypt data using XXTEA via x86 assembly
+    name: encrypt data using XXTEA
     namespace: data-manipulation/encryption/xxtea
     authors:
       - raymond.leong@mandiant.com
diff --git a/data-manipulation/hashing/djb2/hash-data-using-djb2.yml b/data-manipulation/hashing/djb2/hash-data-using-djb2.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: hash data using djb2 via x86 assembly
+    name: hash data using djb2
     namespace: data-manipulation/hashing/djb2
     authors:
       - awillia2@cisco.com
diff --git a/data-manipulation/hashing/fnv/hash-data-using-fnv.yml b/data-manipulation/hashing/fnv/hash-data-using-fnv.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: hash data using fnv via x86 assembly
+    name: hash data using fnv
     namespace: data-manipulation/hashing/fnv
     authors:
       - moritz.raabe@mandiant.com
diff --git a/data-manipulation/hashing/murmur/hash-data-using-murmur3.yml b/data-manipulation/hashing/murmur/hash-data-using-murmur3.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: hash data using murmur3 via x86 assembly
+    name: hash data using murmur3
     namespace: data-manipulation/hashing/murmur
     authors:
       - william.ballenthin@mandiant.com
diff --git a/host-interaction/process/create/create-a-process-with-modified-io-handles-and-window.yml b/host-interaction/process/create/create-a-process-with-modified-io-handles-and-window.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: create a process with modified I/O handles and window via x86 assembly
+    name: create a process with modified I/O handles and window
     namespace: host-interaction/process/create
     authors:
       - matthew.williams@mandiant.com
diff --git a/host-interaction/process/create/create-process-on-linux.yml b/host-interaction/process/create/create-process-on-linux.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: create process on Linux via x86 assembly
+    name: create process on Linux
     namespace: host-interaction/process/create
     authors:
       - joakim@intezer.com
diff --git a/host-interaction/wmi/connect-to-wmi-namespace-via-wbemlocator.yml b/host-interaction/wmi/connect-to-wmi-namespace-via-wbemlocator.yml
@@ -1,7 +1,7 @@
 # generated using capa explorer for IDA Pro
 rule:
   meta:
-    name: connect to WMI namespace via WbemLocator via x86 assembly
+    name: connect to WMI namespace via WbemLocator
     namespace: host-interaction/wmi
     authors:
       - michael.hunhoff@mandiant.com
diff --git a/lib/get-os-version.yml b/lib/get-os-version.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: get OS version via x86 assembly
+    name: get OS version
     authors:
       - "@mr-tz"
     lib: true
diff --git a/lib/validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml b/lib/validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: validate payment card number using luhn algorithm with lookup table via x86 assembly
+    name: validate payment card number using luhn algorithm with lookup table
     authors:
       - "@_re_fox"
     lib: true
diff --git a/lib/validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml b/lib/validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: validate payment card number using luhn algorithm with no lookup table via x86 assembly
+    name: validate payment card number using luhn algorithm with no lookup table
     authors:
       - "@_re_fox"
     lib: true
diff --git a/linking/runtime-linking/populate-syswhispers2-syscall-list.yml b/linking/runtime-linking/populate-syswhispers2-syscall-list.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: populate SysWhispers2 syscall list via x86 assembly
+    name: populate SysWhispers2 syscall list
     namespace: linking/runtime-linking
     authors:
       - still@teamt5.org
diff --git a/linking/runtime-linking/resolve-function-by-brute-ratel-badger-hash.yml b/linking/runtime-linking/resolve-function-by-brute-ratel-badger-hash.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: resolve function by Brute Ratel Badger hash via x86 assembly
+    name: resolve function by Brute Ratel Badger hash
     namespace: linking/runtime-linking
     authors:
       - jakub.jozwiak@mandiant.com
diff --git a/linking/runtime-linking/resolve-function-by-fin8-fasthash.yml b/linking/runtime-linking/resolve-function-by-fin8-fasthash.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: resolve function by FIN8 fasthash via x86 assembly
+    name: resolve function by FIN8 fasthash
     namespace: linking/runtime-linking
     authors:
       - "@r3c0nst (Frank Boldewin)"
diff --git a/linking/static/openssl/linked-against-openssl.yml b/linking/static/openssl/linked-against-openssl.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: linked against OpenSSL via x86 assembly
+    name: linked against OpenSSL
     namespace: linking/static/openssl
     authors:
       - william.ballenthin@mandiant.com
diff --git a/load-code/pe/enumerate-pe-sections.yml b/load-code/pe/enumerate-pe-sections.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: enumerate PE sections via x86 assembly
+    name: enumerate PE sections
     namespace: load-code/pe
     authors:
       - "@Ana06"
diff --git a/load-code/pe/parse-pe-header.yml b/load-code/pe/parse-pe-header.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: parse PE header via x86 assembly
+    name: parse PE header
     namespace: load-code/pe
     authors:
       - moritz.raabe@mandiant.com
diff --git a/load-code/pe/rebuild-import-table.yml b/load-code/pe/rebuild-import-table.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: rebuild import table via x86 assembly
+    name: rebuild import table
     namespace: load-code/pe
     authors:
       - "@Ana06"
diff --git a/load-code/pe/resolve-function-by-parsing-pe-exports.yml b/load-code/pe/resolve-function-by-parsing-pe-exports.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: resolve function by parsing PE exports via x86 assembly
+    name: resolve function by parsing PE exports
     namespace: load-code/pe
     authors:
       - sara-rn
diff --git a/nursery/decode-data-using-base64-via-vbmi-lookup-table.yml b/nursery/decode-data-using-base64-via-vbmi-lookup-table.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: decode data using Base64 via VBMI lookup table via x86 assembly
+    name: decode data using Base64 via VBMI lookup table
     namespace: data-manipulation/encoding/base64
     authors:
       - still@teamt5.org
diff --git a/nursery/send-sms-on-android.yml b/nursery/send-sms-on-android.yml
@@ -1,6 +1,6 @@
 rule:
   meta:
-    name: send SMS on Android via x86 assembly
+    name: send SMS on Android
     namespace: communication/sms
     authors:
       - "@mr-tz"
