Commit 10746121 by mmorenog

Update suicidescripts.yara

parent a2d643aa
// yara sigs for detecting common suicide scripts
rule SuicideScriptL1
rule SuicideScriptL1_1
{
meta:
copyright = "2015 Novetta Solutions"
......@@ -12,7 +12,7 @@ rule SuicideScriptL1
any of them
}
rule SuicideScriptR1_Multi
rule SuicideScriptR1_Multi_1
{
meta:
copyright = "2015 Novetta Solutions"
......@@ -26,7 +26,7 @@ rule SuicideScriptR1_Multi
all of them
}
rule SuicideScriptR
rule SuicideScriptR_1
{
// joanap, joanapCleaner
meta:
......@@ -39,4 +39,4 @@ rule SuicideScriptR
condition:
all of them
}
\ No newline at end of file
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment