YARA unknown stable yara

ek_submissions [utils]

Detects pcaps uploaded to VT and matches IDS detections for Exploit kits

View Source

Detection Logic

$magic at 0 and tags contains "exploit-kit"

Field Validations

Loading…

Comments (0)

Loading comments...