host-interaction/internet/cache
rule:
meta:
name: delete internet cache
namespace: host-interaction/internet/cache
authors:
- michael.hunhoff@mandiant.com
scopes:
static: function
dynamic: thread
features:
- and:
- match: enumerate internet cache
- api: wininet.DeleteUrlCacheEntry
- optional:
- api: wininet.UnlockUrlCacheEntryFile
last edited: 2023-11-24 10:34:28