From e02b6637f6fcb8dd89ee0721307029a3e79bfabc Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Sun, 13 Oct 2024 16:12:23 +0200 Subject: [PATCH] Score adjustments (#41) * Update yara-forge-custom-scoring.yml * Update yara-forge-custom-scoring.yml * Update yara-forge-custom-scoring.yml * deliv-to rule HTML_B64_WASM_Blob * fix: rule with issues --- yara-forge-custom-scoring.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/yara-forge-custom-scoring.yml b/yara-forge-custom-scoring.yml index e22e3d0..7d18402 100644 --- a/yara-forge-custom-scoring.yml +++ b/yara-forge-custom-scoring.yml @@ -270,6 +270,9 @@ noisy-rules: - name: "MALPEDIA_Win_Unidentified_090_Auto" quality: -60 score: 60 + - name: "MALPEDIA_Win_Maze_Auto" # $sequence_8 = { 41 41 41 41 41 41 41 } + quality: -100 + score: 60 # Signature Base - name: "SIGNATURE_BASE_Cobaltstrike_C2_Host_Indicator"