Skip to content

Instantly share code, notes, and snippets.

@hiddenillusion

hiddenillusion/simple.yara

Created April 14, 2021 21:52
Show Gist options
  • Save hiddenillusion/2852d93865e51c72c9676f92584b5096 to your computer and use it in GitHub Desktop.
Save hiddenillusion/2852d93865e51c72c9676f92584b5096 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
simple.yara
rule test_yara_rule
{
strings:
$0 = "Command" nocase wide ascii
$1 = "Windows" nocase wide ascii
condition:
any of them
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment