data/whitelists/custom.yar


1
2
3
4
5
6
7
8
9
10
11
12
13

/* Add your own rules here */
import "hash"

private rule Custom : Blog
{
    meta:
        generated = "2016-07-28T09:50:53.795037"

    condition:
        /* my own webapp 0.42 */
        hash.sha1(0, filesize) == "deadbeaf"
}