Signature Base unknown stable yara

TRITON_ICS_FRAMEWORK [yara]

TRITON framework recovered during Mandiant ICS incident response

View Source

Detection Logic

2 of ($python_*) and 7 of ($py_*) and filesize < 3MB

Field Validations

Loading…

Comments (0)

Loading comments...