From 7df2e61345e54a5fefedf1286112f46c54f83308 Mon Sep 17 00:00:00 2001
From: jvoisin
Date: Mon, 13 Jul 2015 09:42:25 +0200
Subject: Add a match on `array_filter`

---
 malwares.yara | 1 +
 1 file changed, 1 insertion(+)

diff --git a/malwares.yara b/malwares.yara
index 2aea966..1263b39 100644
--- a/malwares.yara
+++ b/malwares.yara
@@ -146,6 +146,7 @@ rule DangerousPhp
         $ = "xmlrpc_decode" fullword
         $ = "show_source" fullword
         $ = "pcntl_exec" fullword
+        $ = "array_filter" fullword
 
         $whitelist = /escapeshellcmd|escapeshellarg/
 
-- 
cgit v1.3