Unverified Commit 0897926e by jovimon Committed by GitHub

Move is__elf to MISC_Utils.yar

parent 9e613bc0
...@@ -3,19 +3,6 @@ ...@@ -3,19 +3,6 @@
long as you use it under this license. long as you use it under this license.
*/ */
private rule is__elf
{
meta:
author = "@mmorenog,@yararules"
strings:
$header = { 7F 45 4C 46 }
condition:
$header at 0
}
rule ELF_Linux_Torte : Linux ELF rule ELF_Linux_Torte : Linux ELF
{ {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment