Skip to content

Commit

Permalink
remove from yarahub
Browse files Browse the repository at this point in the history
because the rule itself is too generic and has a lot of false positives
  • Loading branch information
dubfib authored Nov 25, 2024
1 parent 3ef1e08 commit 162e875
Showing 1 changed file with 1 addition and 6 deletions.
7 changes: 1 addition & 6 deletions winapi/Win32.WinAPI.RegCreateKeyExW.yara
Original file line number Diff line number Diff line change
Expand Up @@ -4,15 +4,10 @@ rule Win32_WinAPI_RegCreateKeyExW
description = "Detects registry key creation from Win32 API function RegCreateKeyExW."
author = "dubfib"
date = "2024-11-25"
yarahub_uuid = "c4149c4a-3771-4283-bb89-5b90a68805f4"
yarahub_license = "CC BY 4.0"
yarahub_rule_matching_tlp = "TLP:WHITE"
yarahub_rule_sharing_tlp = "TLP:WHITE"
yarahub_reference_md5 = "3c0a053c97300914ce205807a698ba12"

strings:
$pattern = { 52 65 67 43 72 65 61 74 65 4B 65 79 45 78 57 }
condition:
$pattern
}
}

0 comments on commit 162e875

Please sign in to comment.