YARA unknown stable yara

ek_submissions_2 [utils]

Detects pcaps uploaded to VT and matches IDS detections for Exploit kits

View Source

Detection Logic

$magic at 0 and tags contains "exploit-kit" and positives >3

Field Validations

Loading…

Comments (0)

Loading comments...