Search by property

This page provides a simple browsing interface for finding entities described by a property and a named value. Other available search interfaces include the page property search, and the ask query builder.

List of results

• File:UserGuide.png  + (13:36:17, 16 June 2015)

• File:BehaviorInstance-Linux.png  + (12:56:40, 17 September 2015)
• File:BehaviorInstance-Windows.png  + (12:57:29, 17 September 2015)
• File:BehaviorInstance-Android.png  + (19:01:42, 18 September 2015)
• File:BehaviorInstance.png  + (19:05:14, 18 September 2015)
• File:BehaviorInstance-Mac OS X.png  + (19:08:56, 18 September 2015)
• File:BehaviorInstance-iOS.png  + (19:12:16, 18 September 2015)
• File:BehaviorInstance-multiple.png  + (19:14:21, 18 September 2015)
• Category:Behaviors  + (19:16:19, 8 December 2016)
• Category:Behavior Instances  + (19:16:19, 8 December 2016)
• Category:Attributes  + (19:16:19, 8 December 2016)
• Category:Capabilities  + (19:16:19, 8 December 2016)
• Category:Subcapabilities  + (19:16:19, 8 December 2016)
• File:ObfuscationMethod.png  + (15:31:21, 26 June 2017)
• Category:Obfuscation Methods  + (15:41:36, 26 June 2017)
• Graph of  + (13:29:31, 28 June 2017)
• Obfuscation Methods  + (13:37:23, 28 June 2017)
• Encyclopedia of Malware Attributes  + (21:47:31, 28 June 2017)
• Capabilities  + (23:07:49, 28 June 2017)
• Behavior Instances  + (12:55:13, 30 June 2017)
• Attributes  + (13:24:44, 30 June 2017)
• ema:Subcapability Hierarchy  + (13:51:21, 30 June 2017)
• Subcapabilities  + (14:34:03, 30 June 2017)
• EMA Semantic MediaWiki Guide to Form Fields  + (20:17:06, 7 July 2017)
• code encryption  + (22:07:30, 7 July 2017)
• symbolic obfuscation  + (22:07:31, 7 July 2017)
• targeted file type  + (22:07:32, 7 July 2017)
• targeted program  + (22:07:33, 7 July 2017)
• applicable platform  + (22:07:37, 7 July 2017)
• backdoor type  + (22:07:39, 7 July 2017)
• infection targeting  + (22:07:40, 7 July 2017)
• Control Graph Flattening  + (22:07:41, 7 July 2017)
• technique  + (22:07:44, 7 July 2017)
• trigger type  + (22:07:44, 7 July 2017)
• erasure scope  + (22:07:44, 7 July 2017)
• file type  + (22:07:45, 7 July 2017)
• targeted website  + (22:07:46, 7 July 2017)
• targeted application  + (22:07:48, 7 July 2017)
• code compression  + (22:07:53, 7 July 2017)
• CryptoAPI  + (22:07:53, 7 July 2017)
• scope  + (22:07:54, 7 July 2017)
• Injected DLL Testing  + (22:07:55, 7 July 2017)
• file modification type  + (22:07:59, 7 July 2017)
• file infection type  + (22:08:01, 7 July 2017)
• cryptocurrency type  + (22:08:02, 7 July 2017)
• Product Key/ID Testing  + (22:08:04, 7 July 2017)
• Guest Process Testing  + (22:08:05, 7 July 2017)
• autonomy  + (22:08:06, 7 July 2017)
• network protocol  + (22:08:07, 7 July 2017)
• targeted sandbox  + (22:08:09, 7 July 2017)
• user privilege escalation type  + (22:08:18, 7 July 2017)
• HTML5 Performance Object  + (22:08:21, 7 July 2017)
• interleaving code  + (22:08:22, 7 July 2017)
• targeted file architecture type  + (22:08:23, 7 July 2017)
• Process Environment Block (PEB)  + (22:08:24, 7 July 2017)
• port number  + (22:08:26, 7 July 2017)
• entry point obfuscation  + (22:08:28, 7 July 2017)
• encryption algorithm  + (22:08:29, 7 July 2017)
• targeted VM  + (22:08:30, 7 July 2017)
• Named System Object Checks  + (22:08:30, 7 July 2017)
• suicide exit  + (22:08:32, 7 July 2017)
• import address table obfuscation  + (22:08:33, 7 July 2017)
• API Call: IsDebuggerPresent  + (22:08:34, 7 July 2017)
• dead code insertion  + (22:08:38, 7 July 2017)
• scope  + (22:08:39, 7 July 2017)
• frequency  + (22:08:42, 7 July 2017)
• archive type  + (22:09:05, 7 July 2017)
• foaf:knows  + (16:03:53, 10 July 2017)
• foaf:name  + (16:03:53, 10 July 2017)
• foaf:homepage  + (16:03:53, 10 July 2017)
• owl:differentFrom  + (16:03:53, 10 July 2017)
• prevent concurrent execution  + (14:48:03, 3 August 2017)
• Timing/Delay Checks  + (18:01:43, 11 September 2017)
• Timing/Date Checks  + (18:04:59, 11 September 2017)
• Undocumented Opcodes  + (18:15:13, 11 September 2017)
• Unusual/Undocumented API Calls  + (16:20:31, 14 September 2017)
• Extended/Different Instruction Sets  + (16:27:56, 14 September 2017)
• Extra Loops/Time Locks  + (16:32:02, 14 September 2017)
• Debugger Artifacts  + (16:37:17, 14 September 2017)
• Guard Pages  + (16:44:57, 14 September 2017)
• Instruction Overlap  + (16:55:09, 14 September 2017)
• Duplicate Rows for Yaron  + (16:21:53, 14 November 2017)
• Screen Resolution Testing  + (18:16:06, 18 May 2018)
• Timing/Up-time Check  + (08:24:21, 12 July 2018)
• Timing/Date Checks  + (09:43:10, 12 July 2018)
• hide kernel modules  + (19:40:07, 15 July 2018)
• Lateral Movement  + (07:29:17, 16 July 2018)
• Collection  + (07:30:54, 16 July 2018)
• Persistence  + (07:32:57, 16 July 2018)
• Exfiltration  + (16:09:22, 16 July 2018)