Module for yara that allows matching on URL components
import "url"
rule test
{
meta:
description = "Using the URL module to match a hostname containing 'google'"
condition:
(url.scheme == "ftp") and url.match.host(/^google/)
}
Module for yara that allows matching on URL components
Module for yara that allows matching on URL components
import "url"
rule test
{
meta:
description = "Using the URL module to match a hostname containing 'google'"
condition:
(url.scheme == "ftp") and url.match.host(/^google/)
}
Module for yara that allows matching on URL components