Comments (3)
commented on July 3, 2024
sorry, missing line...
[WARNING] Yara Rule MATCH: HackTool_Producers DESCRIPTION: Hacktool Producers String
FILE: C:\Users\gunnersson\AppData\Roaming\Mozilla\Firefox\Profiles\ms9m2yly.default\extension-data\ublock0.sqlite
MD5: 0ebe6a02d9915317316643b0b458bd0a
SHA1: 4b47e975a254cfa453cf83346b87979598139f0a
SHA256: 8934e7701147166948488cffd6842cb516cdb3f11baea272f2566898e40177af
MATCHES: Str1: ntsecurity.nu
from loki.
commented on July 3, 2024
more info on that extension
https://en.wikipedia.org/wiki/UBlock
from loki.
Neo23x0
commented on July 3, 2024
Adjusted rule and loki
from loki.
Related Issues (20)
- Suggestion about file skipping due to file size HOT 4
- gen_gcti_cobaltstrike.yar is considered a trojan by kaspersky HOT 1
- Loki scans whole C:/ even with path argument HOT 1
- False positive
- Add YARA repositories manually HOT 2
- Security vulnerabilities in Python dependencies HOT 3
- Installing and running on Linux OS HOT 1
- Force mdmp scan for yara check
- Path issue on Linux with IOCs residing in Windows root folder
- seems that the scanner picks the edge browser HOT 3
- Module not Found rfc5424logging HOT 3
- Loki Flags Nuclei Templates with "WARNING"
- False positive in hacktool_windows_mimikatz_modules rule? HOT 1
- 22 | #include <openssl/asn1.h>
- To find c2 server malicious IP and domains HOT 1
- Generic.Bat.Downloader.1.DDAD1A80 when running upgrade.exe
- False positive (warning) in com.apple.declarations.plist (part of iMazing software)
- Error while initializing Yara rule yara_mixed_ext_vars.yar
- Error while initializing Yara rule thor_inverse_matches.yar
- (Feature) MD5/SHA1/SHA256 whitelist for false alarm files HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from loki.