29 lines
580 B
Text
29 lines
580 B
Text
rule keyboy_mobile_titan
|
|
|
|
{
|
|
|
|
meta:
|
|
|
|
author = "AlienVault Labs"
|
|
|
|
copyright = "Alienvault Inc. 2018"
|
|
|
|
reference = "https://www.alienvault.com/blogs/labs-research/delivery-keyboy"
|
|
|
|
license = "Apache License, Version 2.0"
|
|
|
|
sha256 = "5acc64f814cc06db5e5cc56784607ddfa95e3e45170002a210c807857d48a1b0"
|
|
|
|
strings:
|
|
|
|
$string_1 = "titans.action.GLOBAL_ACTION"
|
|
|
|
$string_2 = "titans.action.LOCATION_ACTION"
|
|
|
|
$string_3 = "titans.action.PHONE_RECORD_ACTION"
|
|
|
|
condition:
|
|
|
|
all of them
|
|
|
|
}
|