mirror of
https://github.com/Yara-Rules/rules
synced 2026-06-08 12:58:40 +00:00
Added msql database usage checker
This commit is contained in:
committed by
GitHub
parent
a7463b2451
commit
0d8952546a
@@ -912,3 +912,20 @@ rule ldpreload
|
||||
condition:
|
||||
($a or $b) and 5 of them
|
||||
}
|
||||
|
||||
rule mysql_database_presence
|
||||
{
|
||||
meta:
|
||||
author="CYB3RMX"
|
||||
description="This rule checks MySQL database presence"
|
||||
|
||||
strings:
|
||||
$db = "MySql.Data"
|
||||
$db1 = "MySqlCommand"
|
||||
$db2 = "MySqlConnection"
|
||||
$db3 = "MySqlDataReader"
|
||||
$db4 = "MySql.Data.MySqlClient"
|
||||
|
||||
condition:
|
||||
(any of ($db*))
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user