enforce string formatting with double quotes + escaped special characters

This commit is contained in:
Michael Hunhoff 2021-03-22 12:01:53 -06:00
parent a6ec668690
commit 20e1b8fd4c
78 changed files with 300 additions and 283 deletions

View file

@ -13,6 +13,6 @@ rule:
features:
- or:
- and:
- string: wextract_cleanup%d
- string: Software\Microsoft\Windows\CurrentVersion\RunOnce
- string: ' <description>IExpress extraction tool</description>'
- string: "wextract_cleanup%d"
- string: "Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce"
- string: " <description>IExpress extraction tool</description>"