Commit e3e442d4 by Ryan B

Include license text

Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com>
parent 3d0cd31b
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule MSIETabularActivex rule MSIETabularActivex
{ {
meta: meta:
......
...@@ -2,6 +2,7 @@ ...@@ -2,6 +2,7 @@
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license. This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/ */
rule JavaDeploymentToolkit rule JavaDeploymentToolkit
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule FlashNewfunction: decodedPDF rule FlashNewfunction: decodedPDF
{ {
meta: meta:
......
/* /*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
/*
* *
* Signature for the CVE-2012-0158 used in KeyBoy operation * Signature for the CVE-2012-0158 used in KeyBoy operation
* Ref https://citizenlab.org/2016/11/parliament-keyboy/ * Ref https://citizenlab.org/2016/11/parliament-keyboy/
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule cve_2013_0074 rule cve_2013_0074
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule CVE_2013_0422 rule CVE_2013_0422
{ {
meta: meta:
......
...@@ -2,6 +2,7 @@ ...@@ -2,6 +2,7 @@
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license. This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/ */
rule Exploit_MS15_077_078: Exploit { rule Exploit_MS15_077_078: Exploit {
meta: meta:
description = "MS15-078 / MS15-077 exploit - generic signature" description = "MS15-078 / MS15-077 exploit - generic signature"
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule Linux_DirtyCow_Exploit { rule Linux_DirtyCow_Exploit {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule potential_CVE_2017_11882 rule potential_CVE_2017_11882
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule crime_ole_loadswf_cve_2018_4878 rule crime_ole_loadswf_cve_2018_4878
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and
open to any user or organization, as long as you use it under this license.
*/
rule Fake_it_maintenance_bulletin : mail rule Fake_it_maintenance_bulletin : mail
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and
open to any user or organization, as long as you use it under this license.
*/
rule davivienda : mail { rule davivienda : mail {
strings: strings:
$nombre = "davivienda" nocase $nombre = "davivienda" nocase
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and
open to any user or organization, as long as you use it under this license.
*/
rule extortion_email rule extortion_email
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule eleonore_jar : EK rule eleonore_jar : EK
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule fragus_htm : EK rule fragus_htm : EK
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule phoenix_html : EK rule phoenix_html : EK
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule sakura_jar : EK rule sakura_jar : EK
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule zeroaccess_css : EK rule zeroaccess_css : EK
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule zerox88_js2 rule zerox88_js2
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule zeus_js : EK rule zeus_js : EK
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule Maldoc_CVE_2017_11882 : Exploit { rule Maldoc_CVE_2017_11882 : Exploit {
meta: meta:
description = "Detects maldoc With exploit for CVE_2017_11882" description = "Detects maldoc With exploit for CVE_2017_11882"
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule Contains_DDE_Protocol rule Contains_DDE_Protocol
{ {
meta: meta:
......
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule Maldoc_Suspicious_OLE_target { rule Maldoc_Suspicious_OLE_target {
meta: meta:
description = "Detects maldoc With Tartgeting Suspicuios OLE" description = "Detects maldoc With Tartgeting Suspicuios OLE"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment