Unverified Commit 4c8e2a5f by spaddex

Renamed poetRAT to avoid dupes + adjusted critera

The regex for RAT_PoetRATPython was generating false positives. Adjusted
rule to need hits on at least 3 of the strings
parent a1005b74
rule PoetRat rule PoetRat_Doc
{ {
meta: meta:
Author = "Nishan Maharjan" Author = "Nishan Maharjan"
...@@ -22,4 +22,4 @@ rule PoetRat ...@@ -22,4 +22,4 @@ rule PoetRat
$exe = ".exe" $exe = ".exe"
condition: condition:
all of them all of them
} }
\ No newline at end of file
rule PoetRat rule PoetRat_Python
{ {
meta: meta:
Author = "Nishan Maharjan" Author = "Nishan Maharjan"
...@@ -15,5 +15,5 @@ rule PoetRat ...@@ -15,5 +15,5 @@ rule PoetRat
$pipe_out = "Abibliophobia23" $pipe_out = "Abibliophobia23"
$shot = "shot_{0}_{1}.png" $shot = "shot_{0}_{1}.png"
condition: condition:
any of them 3 of them
} }
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment