Removing false positives created by temporary Office files

cuckoosandbox / community

Repository of modules and signatures contributed by the community

323 stars 175 forks source link

Removing false positives created by temporary Office files #488

Closed cccs-kevin closed 2 years ago

cccs-kevin commented 3 years ago

creates_hidden_file and creates_doc signatures both are raised falsely when a temporary backup Office file is created after an Office file is opened. This PR refines these signatures to avoid that.