mirror of https://github.com/MISP/misp-modules
6 lines
101 B
Plaintext
6 lines
101 B
Plaintext
|
import "pe"
|
||
|
rule my_pe {
|
||
|
condition:
|
||
|
pe.imphash() == "eecc824da5b175f530705611127a6b41"
|
||
|
}
|