8 lines
179 B
Text
8 lines
179 B
Text
|
rule webc2_adspace : apt
|
||
|
{
|
||
|
strings:
|
||
|
$a = "ntshrui"
|
||
|
$b = "Microsoft(R) Windows(R) Operating System"
|
||
|
condition:
|
||
|
filesize < 100KB and (2 of ($a,$b))
|
||
|
}
|