| Path : /usr/local/scan/lw-yara/includes/ |
| Current File : //usr/local/scan/lw-yara/includes/symlink-tool.yar |
rule symlink_hacking_tool
{
meta:
author = "Brian Laskowski"
info = " symlink hack tool 05-14-18 "
strings:
$a= "$folfig"
$b= "$str=explode"
$c= "$home"
$d= "$user"
$e= "symlink"
condition:
all of them
}