Skip to content

Commit af5a329

Browse files
TextExample.yara rule
1 parent cba30be commit af5a329

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
/*
2+
Text strings
3+
As shown in previous sections, text strings are generally defined like this:
4+
*/
5+
rule TextExample
6+
{
7+
strings:
8+
$text_string = "foobar"
9+
10+
condition:
11+
$text_string
12+
}
13+
/*
14+
This is the simplest case: an ASCII-encoded, case-sensitive string.
15+
However, text strings can be accompanied by some useful modifiers that alter
16+
the way in which the string will be interpreted. Those modifiers are appended
17+
at the end of the string definition separated by spaces, as will be discussed below.
18+
*/

0 commit comments

Comments
 (0)