valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 10:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

reduce score of GIF anomaly rule

Browse Source
This commit is contained in:
Florian Roth 2020-07-02 17:45:33 +02:00
parent 09a1d6f3a0
commit bbf2d7911f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yara/gen_file_anomalies.yar
View File

@ -16,7 +16,7 @@ rule SUSP_GIF_Anomalies {
meta:
description = "Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type"
author = "Florian Roth"
score = 70
score = 60
reference = "https://en.wikipedia.org/wiki/GIF"
date = "2020-07-02"
condition: