Skip to content

R
rules
Commit 6364ad80 by Marc Rivero López Committed by GitHub
Options

Update APT_APT3102.yar 

Rules indented correctly
parent 13af57f8
Showing with 4 additions and 2 deletions
malware/APT_APT3102.yar
...@@ -5,8 +5,9 @@ ...@@ -5,8 +5,9 @@
import "pe" import "pe"
rule APT3102Code : APT3102 Family rule APT3102Code
{ {
meta: meta:
description = "3102 code features" description = "3102 code features"
author = "Seth Hardy" author = "Seth Hardy"
...@@ -19,8 +20,9 @@ rule APT3102Code : APT3102 Family ...@@ -19,8 +20,9 @@ rule APT3102Code : APT3102 Family
any of them any of them
} }
rule APT3102Strings : APT3102 Family rule APT3102Strings
{ {
meta: meta:
description = "3102 Identifying Strings" description = "3102 Identifying Strings"
author = "Seth Hardy" author = "Seth Hardy"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment