host-interaction/internet/cache

delete internet cache

rule:
  meta:
    name: delete internet cache
    namespace: host-interaction/internet/cache
    authors:
      - michael.hunhoff@mandiant.com
    scopes:
      static: function
      dynamic: thread
  features:
    - and:
      - match: enumerate internet cache
      - api: wininet.DeleteUrlCacheEntry
      - optional:
        - api: wininet.UnlockUrlCacheEntryFile

last edited: 2023-11-24 10:34:28