Skip to content

R
rules
Commit cceef543 by mmorenog
Options

Update scam.yar

parent 2bfc93e5
Showing with 3 additions and 4 deletions
email/scam.yar
...@@ -3,7 +3,7 @@ ...@@ -3,7 +3,7 @@
long as you use it under this license. long as you use it under this license.
*/ */
rule content { rule content : mail {
meta: meta:
author = "A.Sanchez <asanchez@koodous.com>" author = "A.Sanchez <asanchez@koodous.com>"
description = "Detects scam emails with phishing attachment." description = "Detects scam emails with phishing attachment."
...@@ -17,7 +17,7 @@ rule content { ...@@ -17,7 +17,7 @@ rule content {
all of them all of them
} }
rule attachment { rule attachment : mail {
meta: meta:
author = "A.Sanchez <asanchez@koodous.com>" author = "A.Sanchez <asanchez@koodous.com>"
description = "Detects scam emails with phishing attachment." description = "Detects scam emails with phishing attachment."
...@@ -32,4 +32,4 @@ rule attachment { ...@@ -32,4 +32,4 @@ rule attachment {
condition: condition:
all of them all of them
} }
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment