We have deleted duplicated rule

We have deleted duplicated rule

We have deleted duplicated rule
0afa4987 · j0sm1 · 02409127 · 0afa4987
Commit 0afa4987 authored Oct 20, 2015 by j0sm1
Show whitespace changes
Inline Side-by-side

Showing with 0 additions and 11 deletions

Miscelanea.yar malware/Miscelanea.yar +0 -11

No files found.
--- a/malware/Miscelanea.yar
+++ b/malware/Miscelanea.yar
@@ -602,17 +602,6 @@ rule OrcaRAT
        $MZ at 0 and filesize < 500KB and (all of ($apptype*) and 1 of ($err*))
 }

-rule mimikatz_lsass_mdmp
-{
-	meta:
-		description		= "LSASS minidump file for mimikatz"
-		author			= "Benjamin DELPY (gentilkiwi)"
-	strings:
-		$lsass			= "System32\\lsass.exe"	wide nocase
-	condition:
-		(uint32(0) == 0x504d444d) and $lsass
-}
-
 rule EmiratesStatement 
 {
 	meta: