mirror of
https://github.com/vee1e/capa-rules.git
synced 2026-09-01 10:58:40 +00:00
enforce string formatting with double quotes + escaped special characters
This commit is contained in:
parent
a6ec668690
commit
20e1b8fd4c
78 changed files with 300 additions and 283 deletions
|
|
@ -13,6 +13,6 @@ rule:
|
|||
features:
|
||||
- or:
|
||||
- and:
|
||||
- string: wextract_cleanup%d
|
||||
- string: Software\Microsoft\Windows\CurrentVersion\RunOnce
|
||||
- string: ' <description>IExpress extraction tool</description>'
|
||||
- string: "wextract_cleanup%d"
|
||||
- string: "Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce"
|
||||
- string: " <description>IExpress extraction tool</description>"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue