Skip to content

Commit

Permalink
Update IEuser_author_doc.yar
Browse files Browse the repository at this point in the history
  • Loading branch information
bartblaze authored Jan 8, 2024
1 parent 76102f2 commit bd6a9e4
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions rules/generic/IEuser_author_doc.yar
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ rule IEuser_author_doc
source = "BARTBLAZE"
author = "@bartblaze"
description = "Identifies Microsoft Word documents created with the default user on IE11 test VMs, more likely to be suspicious."
category = "MALWARE"
category = "INFO"
reference = "https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/"


Expand All @@ -22,4 +22,4 @@ rule IEuser_author_doc
condition:
$doc at 0 and $ieuser
}
}

0 comments on commit bd6a9e4

Please sign in to comment.