On Tue, 17 Sep 2019, hg user wrote:
It is a "dumb" rule but the quicker I could create.
https://pastebin.com/bxRSds7a
Suggestions:
(1) use a URI rule rather than a BODY rule
(2) escape the periods; you want to match a period, not any-character.
On Tue, Sep 17, 2019 at 11:59 AM Blason R <blaso...@gmail.com> wrote:
If possible please share it here?
On Tue, Sep 17, 2019 at 3:20 PM hg user <mercurialu...@gmail.com> wrote:
A new emotet campain is in progress (https://twitter.com/Cryptolaemus1)
and I created a rule... I don't know if is it possible to share (via
pastebin) the rule I created to have feedback from the experts...
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Are you a mildly tech-literate politico horrified by the level of
ignorance demonstrated by lawmakers gearing up to regulate online
technology they don't even begin to grasp? Cool. Now you have a
tiny glimpse into a day in the life of a gun owner. -- Sean Davis
-----------------------------------------------------------------------
Today: the 232nd anniversary of the signing of the U.S. Constitution
