set HTTP cookie

rule:
  meta:
    name: set HTTP cookie
    namespace: communication/http
    authors:
      - michael.hunhoff@mandiant.com
      - anushka.virgaonkar@mandiant.com
    scopes:
      static: function
      dynamic: call
    att&ck:
      - Command and Control::Application Layer Protocol::Web Protocols [T1071.001]
    references:
      - https://docs.microsoft.com/en-us/dotnet/api/system.net.cookiecontainer.setcookies
  features:
    - or:
      - api: System.Net.CookieContainer::SetCookies
      - property/write: System.Net.HttpWebRequest::CookieContainer