Update virustotal.yar

dfcc4930 · mmorenog · GitHub · 1747c46e · dfcc4930
Commit dfcc4930 authored Apr 26, 2017 by mmorenog Committed by GitHub Apr 26, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletions

virustotal.yar utils/virustotal.yar +2 -1

No files found.
--- a/utils/virustotal.yar
+++ b/utils/virustotal.yar
 //Rule to Catch Intelligence files in the meta of files uploaded. Current rule looks for NSA and MOSAD in meta of samples.

-rule catch_intelligence_files
+/* rule catch_intelligence_files
 {
 meta:
 	author = "@abhinavbom"
@@ -87,3 +87,4 @@ strings:
 condition:
 	$magic at 0 and tags contains "exploit-kit" and positives >3
 }
+*/