valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 18:15:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed duplicate rule name bug

Browse Source
This commit is contained in:
Florian Roth 2016-09-11 15:58:57 +02:00
parent a3ed8d33b3
commit 5744546da1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yara/thor-hacktools.yar
View File

@ -3303,7 +3303,7 @@ rule cachedump {
( uint16(0) == 0x5a4d and filesize < 500KB and 1 of them ) or ( 3 of them )
}
rule PwDump {
rule PwDump_B {
meta:
description = "Detects a tool used by APT groups - file PwDump.exe"
author = "Florian Roth"