lint & name - fix
parent
886e444e3d
commit
579fd894ae
|
@ -1,7 +1,7 @@
|
||||||
id: quasar-rat-c2
|
id: quasar-rat-c2
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: Detect SSL Certificate Quasar RAT C2
|
name: Quasar RAT C2 SSL Certificate - Detect
|
||||||
author: johnk3r,pussycat0x
|
author: johnk3r,pussycat0x
|
||||||
severity: info
|
severity: info
|
||||||
description: |
|
description: |
|
||||||
|
@ -24,7 +24,7 @@ ssl:
|
||||||
words:
|
words:
|
||||||
- "Quasar Server CA"
|
- "Quasar Server CA"
|
||||||
- "OrcusServerCertificate"
|
- "OrcusServerCertificate"
|
||||||
condition: or
|
condition: or
|
||||||
|
|
||||||
extractors:
|
extractors:
|
||||||
- type: json
|
- type: json
|
||||||
|
|
Loading…
Reference in New Issue