search

Neo23x0 / signature-base

YARA signature and IOC database for my scanners and tools
Other
2.47k stars 604 forks source link

fix: Remove Rule with to many FPs #296

Closed humpalum closed 1 year ago

humpalum commented 1 year ago

FPs: https://www.virustotal.com/gui/file/3b8961881c7a1aeaf40b172066455193fdf8db46e85d31135da793d5f4105ccd https://www.virustotal.com/gui/file/e751822f507f5677f52aaa964393cbb33ff8ede00f197a4f265cb479cfbdcfdb

And many more.

This rule needs a deeper rework so i would just disable it for now.