10 lines
198 B
Text
10 lines
198 B
Text
|
rule lowers_security {
|
||
|
|
strings:
|
||
|
|
$actions1 = "EnableLUA"
|
||
|
|
$actions2 = "AntiVirusDisableNotify"
|
||
|
|
$actions3 = "DisableNotifications"
|
||
|
|
$actions4 = "UpdatesDisableNotify"
|
||
|
|
|
||
|
|
condition:
|
||
|
|
2 of them
|
||
|
|
}
|