ail-framework/bin/trackers/yara/custom-rules/test.yar
2020-08-12 09:28:36 +02:00

14 lines
217 B
Text

/*
Test Rule
*/
rule certificatestest
{
strings:
$ssh_priv = "BEGIN RSA PRIVATE KEY" wide ascii nocase
$pem_cert = "BEGIN CERTIFICATE" wide ascii nocase
condition:
any of them
}