Add files via upload

scodx · Jan 20, 2020 · 866976a · 866976a
1 parent faecb64
commit 866976a
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/yara_rules/blacklist.yar b/yara_rules/blacklist.yar
@@ -0,0 +1,15 @@
+ rule blacklist
+{
+    strings:
+        $b1 = "#EXTINF:" nocase
+        $b2 = "#EXTM3U" nocase
+        $b3 = "chegg" nocase
+        $b4 = "bukkit" nocase
+        $b5 = "Minecraft" nocase
+        $b6 = "serfish" nocase
+        $b7 = "Technic Launcher is starting"
+        $b8 = "[Server Thread/WARN]"
+    condition:
+        any of them
+
+}
diff --git a/yara_rules/keywords.yar b/yara_rules/keywords.yar
@@ -0,0 +1,10 @@
+rule keywords
+{
+    strings:
+        $google_drive = "drive.google.com" wide ascii nocase
+        $mega_nz = "mega.nz" wide ascii nocase
+        $dropbox = "dropbox.com" wide ascii nocase
+    condition:
+        any of them
+
+}