Skip to content

Commit

Permalink
Blacklist mimikatz YARA rule
Browse files Browse the repository at this point in the history 
LibClamAV Error: parse_yara_hex_string: Single byte subpatterns unsupported in ClamAV
LibClamAV Error: load_oneyara: error in parsing yara hex string
LibClamAV Warning: load_oneyara: clamav cannot support 1 input strings, skipping YARA.mimikatz
LibClamAV Warning: cli_loadyara: problem parsing yara file /var/lib/clamav/kiwi_passwords.yar, yara rule mimikatz
  • Loading branch information
@pyllyukko
pyllyukko committed Nov 22, 2023
1 parent 3fd1768 commit 531916b
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions tasks/clamav.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -217,6 +217,7 @@
malware_shellcode_hash
Windows_Trojan_BloodAlchemy_de591c5a
malware_PlugX_config
mimikatz
tags:
- configuration
- yara
Expand Down

1 comment on commit 531916b

@pyllyukko
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#84

Please sign in to comment.