From 48936efa96ae17295be4e0a71be3294f0ec6aef8 Mon Sep 17 00:00:00 2001 From: Mathieu Deous Date: Mon, 2 May 2022 20:18:23 +0200 Subject: Make application go-install-able and create a docker image --- data/whitelists/custom.yar | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 data/whitelists/custom.yar (limited to 'data/whitelists/custom.yar') diff --git a/data/whitelists/custom.yar b/data/whitelists/custom.yar new file mode 100644 index 0000000..594d25b --- /dev/null +++ b/data/whitelists/custom.yar @@ -0,0 +1,13 @@ +/* Add your own rules here */ +import "hash" + +private rule Custom : Blog +{ + meta: + generated = "2016-07-28T09:50:53.795037" + + condition: + /* my own webapp 0.42 */ + hash.sha1(0, filesize) == "deadbeaf" +} + -- cgit v1.3