Disable FP until fixed

This commit is contained in:
ditekshen
2023-08-22 16:54:01 +03:00
parent 9062a7ff71
commit 61a0009bbb
+2
View File
@@ -10979,6 +10979,7 @@ rule MALWARE_Win_ToxicEye {
uint16(0) == 0x5a4d and 7 of them
}
/*
rule MALWARE_Win_RDPCredsStealer {
meta:
author = "ditekSHen"
@@ -10995,6 +10996,7 @@ rule MALWARE_Win_RDPCredsStealer {
condition:
uint16(0) == 0x5a4d and (2 of ($x*) or (1 of ($x*) and 2 of ($s*)) or 3 of ($s*))
}
*/
rule MALWARE_Win_RDPCredsStealerInjector {
meta: