ail-framework/bin/trackers/yara/custom-rules/test.yar

15 lines
217 B
Text
Raw Permalink Normal View History

2020-08-12 07:28:36 +00:00
/*
Test Rule
*/
rule certificatestest
{
strings:
$ssh_priv = "BEGIN RSA PRIVATE KEY" wide ascii nocase
$pem_cert = "BEGIN CERTIFICATE" wide ascii nocase
condition:
any of them
}