search

nexxai / CryptoBlocker

A script to deploy File Server Resource Manager and associated scripts to block infected users
GNU General Public License v2.0
200 stars 73 forks source link

oor\..* too broad #55

Closed tilkov closed 6 years ago

tilkov commented 6 years ago

Hi,

The rule is too broad an matches words like door and poor. Using https://github.com/quickreflex/ransomware-samba-ban as client.

nexxai commented 6 years ago

Hi there,

I would suggest you contact the developers of that script and let them know, since that's more of a difference in how Samba acts vs. Microsoft's FSRM role, and they might need to do a little more processing to our list.

Thanks