Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs
This commit is contained in:
14
data/ioc/yara/payloads.yara
Normal file
14
data/ioc/yara/payloads.yara
Normal file
@@ -0,0 +1,14 @@
|
||||
rule XYPayload : Payload
|
||||
{
|
||||
meta:
|
||||
description = "Identifier for payloads using XXXXYYYY/YYYYXXXX markers"
|
||||
author = "Seth Hardy"
|
||||
last_modified = "2014-05-05"
|
||||
|
||||
strings:
|
||||
$start_marker = "XXXXYYYY"
|
||||
$end_marker = "YYYYXXXX"
|
||||
|
||||
condition:
|
||||
$start_marker and $end_marker
|
||||
}
|
||||
Reference in New Issue
Block a user