Unverified Commit c9af0416 by Wan-Ping Tsai Committed by GitHub

Update RomeoFoxtrot_mod.yara.error

The $challenge is not defined. Recommend to remove it so that this rule could be imported.
parent 8f2e56df
...@@ -52,6 +52,6 @@ rule RomeoFoxtrot ...@@ -52,6 +52,6 @@ rule RomeoFoxtrot
$response = "RESPONSE 200 OK!!!" $response = "RESPONSE 200 OK!!!"
condition: condition:
($challenge and $response) or $response or
$connect in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size)) $connect in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size))
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment