mirror of
https://github.com/cisagov/snafflepy
synced 2026-09-24 18:22:23 +00:00
11 lines
370 B
TOML
11 lines
370 B
TOML
[[ClassifierRules]]
|
|
EnumerationScope = "ShareEnumeration"
|
|
RuleName = "KeepDollarShares"
|
|
MatchAction = "Snaffle"
|
|
Description = "Notifies the user that C$ or ADMIN$ is visible on file share, but doesn't actually scan inside it."
|
|
MatchLocation = "ShareName"
|
|
WordListType = "Exact"
|
|
MatchLength = 0
|
|
WordList = ["\\\\C\\$",
|
|
"\\\\ADMIN\\$", "ADMIN\\$", "C\\$"]
|
|
Triage = "Black" |