rule:
meta:
name: set current directory
namespace: host-interaction/file-system
authors:
- michael.hunhoff@mandiant.com
scopes:
static: function
dynamic: call
features:
- or:
- api: System.IO.Directory::SetCurrentDirectory
- api: kernel32.SetCurrentDirectory
- api: chdir
- api: fchdir
last edited: 2023-11-24 10:34:28