Added msql database usage checker

This commit is contained in:
Mehmet Ali KERİMOĞLU
2021-08-05 14:09:30 +00:00
committed by GitHub
parent a7463b2451
commit 0d8952546a
+17
View File
@@ -912,3 +912,20 @@ rule ldpreload
condition:
($a or $b) and 5 of them
}
rule mysql_database_presence
{
meta:
author="CYB3RMX"
description="This rule checks MySQL database presence"
strings:
$db = "MySql.Data"
$db1 = "MySqlCommand"
$db2 = "MySqlConnection"
$db3 = "MySqlDataReader"
$db4 = "MySql.Data.MySqlClient"
condition:
(any of ($db*))
}