valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 18:15:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

False Positive Reduction

Browse Source
This commit is contained in:
Florian Roth 2017-12-19 01:36:08 +01:00
parent 33560d9876
commit e58a67f5ad
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
yara/apt_moonlightmaze.yar
View File

@ -41,8 +41,8 @@ strings:
$a11="ork error" ascii fullword
condition:
// Change from "any of them" to 3 of them due to false positives with Nvidia drivers
3 of ($a*)
// Added filesize due to false positives with Nvidia drivers in process memory
filesize < 5000KB and 3 of ($a*)
}