Skip to content

Commit ab60201

Browse files
committed
examples minor updates
1 parent ad81784 commit ab60201

File tree

3 files changed

+6
-7
lines changed

3 files changed

+6
-7
lines changed

examples/example_configuration_linux.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,6 @@ options:
1515
findInNetworkDrives: false
1616
findInCDRomDrives: false
1717
output:
18-
copyMatchingFiles: true
19-
base64Files: true
18+
copyMatchingFiles: false
19+
base64Files: false
2020
filesCopyPath: ''

examples/example_configuration_windows.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ input:
1616
- 'A4AF9EF6E345B3B4EA50DDE672A986C14F9A195E407EBAC36B1652AACC10E3EE'
1717
options:
1818
contentMatchDependsOnPathMatch: false
19-
findInHardDrives: false
19+
findInHardDrives: true
2020
findInRemovableDrives: false
21-
findInNetworkDrives: true
21+
findInNetworkDrives: false
2222
findInCDRomDrives: false
2323
output:
24-
copyMatchingFiles: true
25-
base64Files: true
24+
copyMatchingFiles: false
25+
base64Files: false
2626
filesCopyPath: ''

examples/example_rule_windows.yar

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,6 @@ rule fastfinder_example{
88
$str3 = "nslookup.pdb"
99
$str4 = "getaddrinfo"
1010
$str5 = "/.nslookuprc"
11-
$op = { 8b ff 55 8b ec 81 ec 90 02 00 00 a1 ?? ?? ?? ?? 33 c5 89 45 fc 8b 0d ?? ?? ?? ?? 8b 4? ?? 53 8b 5d 08 89 8? ?? ?? ?? ?? 8b 45 18 56 8b 75 14 89 8? ?? ?? ?? ?? 8d 41 0c 89 9? ?? ?? ?? ?? 89 8? ?? ?? ?? ?? 89 8? ?? ?? ?? ?? 57 8b 3d ?? ?? ?? ?? 3b c3 76 ?? }
1211
condition:
1312
all of them and uint16(0) == 0x5a4d
1413
}

0 commit comments

Comments
 (0)