12 lines
218 B
Text
12 lines
218 B
Text
|
rule NetC
|
||
|
|
{
|
||
|
|
meta:
|
||
|
|
reference = "https://cdn2.hubspot.net/hubfs/270968/assets/Cleaver/Cylance_Operation_Cleaver_Report.pdf"
|
||
|
|
|
||
|
|
strings:
|
||
|
|
$s1 = "NetC.exe" wide
|
||
|
|
$s2 = "Net Service"
|
||
|
|
|
||
|
|
condition:
|
||
|
|
all of them
|
||
|
|
}
|