Unverified Commit 0d895254 by Mehmet Ali KERİMOĞLU Committed by GitHub

Added msql database usage checker

parent a7463b24
......@@ -912,3 +912,20 @@ rule ldpreload
condition:
($a or $b) and 5 of them
}
rule mysql_database_presence
{
meta:
author="CYB3RMX"
description="This rule checks MySQL database presence"
strings:
$db = "MySql.Data"
$db1 = "MySqlCommand"
$db2 = "MySqlConnection"
$db3 = "MySqlDataReader"
$db4 = "MySql.Data.MySqlClient"
condition:
(any of ($db*))
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment