Commit f21d677a by j0sm1

Modify Linux_BillGates rule

We modify Linux_BillGates rule.
Commit: d05b8f8bb655ce56a87ecb78f81f0b5426a039db
PR #7 from @nyx0
parent 8bd1abda
...@@ -21,11 +21,13 @@ rule LinuxAESDDoS ...@@ -21,11 +21,13 @@ rule LinuxAESDDoS
2 of ($a,$b,$c) 2 of ($a,$b,$c)
} }
rule LinuxBillGates rule Linux_BillGates
{ {
meta: meta:
author = "@benkow_" Author = "@benkow_"
description = "http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3429" Date = "2014/08/11"
Description = "Strings inside"
Reference = "http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3429"
strings: strings:
$a= "12CUpdateGates" $a= "12CUpdateGates"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment