Browse Source

[Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points

tags/3.2
Vsevolod Stakhov 2 years ago
parent
commit
eb577f16af
1 changed files with 5 additions and 0 deletions
  1. 5
    0
      conf/scores.d/mime_types_group.conf

+ 5
- 0
conf/scores.d/mime_types_group.conf View File

@@ -43,6 +43,11 @@ symbols = {
description = "Encrypted archive in a message";
one_shot = true;
}
"MIME_OBFUSCATED_ARCHIVE" {
weight = 8.0;
description = "Archive has files with clear obfuscation signs";
one_shot = true;
}
"MIME_EXE_IN_GEN_SPLIT_RAR" {
weight = 5.0;
description = "EXE file in RAR archive with generic split extension (e.g. .001)";

Loading…
Cancel
Save