Update virustotal.yar

This commit is contained in:
mmorenog
2017-04-26 09:46:54 +02:00
committed by GitHub
parent 1747c46eba
commit dfcc493001
+2 -1
View File
@@ -1,6 +1,6 @@
//Rule to Catch Intelligence files in the meta of files uploaded. Current rule looks for NSA and MOSAD in meta of samples.
rule catch_intelligence_files
/* rule catch_intelligence_files
{
meta:
author = "@abhinavbom"
@@ -87,3 +87,4 @@ strings:
condition:
$magic at 0 and tags contains "exploit-kit" and positives >3
}
*/