Sneed-Reactivity/yara-mikesxrs/RSA/Artifact_ORION_aPlib.yar

15 lines
297 B
Text
Raw Normal View History

rule Artifact_ORION_aPlib
{
meta:
Author = "HB"
Date = "30 Sep 2013"
Project = "Orion"
Reference = "https://blogs.rsa.com/wp-content/uploads/2015/05/RSA-IR-Case-Study.pdf"
strings:
$a1 = "aPLib v"
$a2 = "the smaller the better :)"
$a3 = "Joergen Ibsen"
condition:
all of them
}