admin/Yara-Rules-rules
1
0
Fork 0
mirror of https://github.com/Yara-Rules/rules synced 2026-06-08 12:58:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added domain and URL rules

Browse Source
This commit is contained in:
Antonio S
2016-12-02 08:01:23 +01:00
parent 0d30145434
commit b42bbf6d8f
2 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
utils/domain.yar
+13
View File
@@ -0,0 +1,13 @@
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as
long as you use it under this license.
*/
rule domain {
meta:
author = "Antonio S. <asanchez@plutec.net>"
strings:
$domain_regex = /([\w\.-]+)/ wide ascii
condition:
$domain_regex
}
utils/url.yar
+13
View File
@@ -0,0 +1,13 @@
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as
long as you use it under this license.
*/
rule url {
meta:
author = "Antonio S. <asanchez@plutec.net>"
strings:
$url_regex = /https?:\/\/([\w\.-]+)([\/\w \.-]*)/ wide ascii
condition:
$url_regex
}