Skip to content

Commit 0c6dc5c

Browse files
committed
update
1 parent b4db605 commit 0c6dc5c

File tree

1 file changed

+21
-0
lines changed
  • Advent-of-Cyber-2021/Day-21-Needles_In_Computer_Stacks

1 file changed

+21
-0
lines changed
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Day 21 - Needles In Computer Stacks
2+
3+
- We changed the text in the string $a as shown in the eicaryara rule we wrote, from X5O to X50, that is, we replaced the letter O with the number 0. The condition for the Yara rule is $a and $b and $c and $d. If we are to only make a change to the first boolean operator in this condition, what boolean operator shall we replace the 'and' with, in order for the rule to still hit the file?
4+
5+
- `**`
6+
7+
- What option is used in the Yara command in order to list down the metadata of the rules that are a hit to a file?
8+
9+
- `**`
10+
11+
- What section contains information about the author of the Yara rule?
12+
13+
- `********`
14+
15+
- What option is used to print only rules that did not hit?
16+
17+
- `**`
18+
19+
- Change the Yara rule value for the $a string to X50. Rerun the command, but this time with the -c option. What is the result?
20+
21+
- `*`

0 commit comments

Comments
 (0)