Signature Base unknown stable yara

SUSP_OneNote_Embedded_FileDataStoreObject_Type_Jan23_1 [yara]

Detects suspicious embedded file types in OneNote files

View Source

Detection Logic

filesize < 10MB and 1 of them

Field Validations

Loading…

Comments (0)

Loading comments...