data-manipulation/prng

generate random bytes in .NET

rule:
  meta:
    name: generate random bytes in .NET
    namespace: data-manipulation/prng
    authors:
      - michael.hunhoff@mandiant.com
    scopes:
      static: function
      dynamic: call
    mbc:
      - Cryptography::Generate Pseudo-random Sequence::Use API [C0021.003]
  features:
    - or:
      - api: System.Security.Cryptography.Rfc2898DeriveBytes.GetBytes
      - api: System.Security.Cryptography.RandomNumberGenerator::Fill
      - api: System.Security.Cryptography.RandomNumberGenerator::GetBytes
      - api: System.Security.Cryptography.RandomNumberGenerator::GetNonZeroBytes

last edited: 2023-11-24 10:34:28