diff options
| author | Carsten Rosenberg <c.rosenberg@heinlein-support.de> | 2019-01-26 10:28:51 +0100 |
|---|---|---|
| committer | Carsten Rosenberg <c.rosenberg@heinlein-support.de> | 2019-01-26 10:28:51 +0100 |
| commit | 532901848a31e533b4e8e14b34254dd43f005497 (patch) | |
| tree | 3f07c67bf14aafa28c63863959ce7dbaa96e2582 | |
| parent | 193fc0d39126ed23c6fb622c8301aa1f7847ad5f (diff) | |
| download | rspamd-532901848a31e533b4e8e14b34254dd43f005497.tar.gz rspamd-532901848a31e533b4e8e14b34254dd43f005497.zip | |
[Minor] lua_scanners - oletools - complete threats in extended mode
| -rw-r--r-- | lualib/lua_scanners/oletools.lua | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lualib/lua_scanners/oletools.lua b/lualib/lua_scanners/oletools.lua index f0fdd82b4..577b79863 100644 --- a/lualib/lua_scanners/oletools.lua +++ b/lualib/lua_scanners/oletools.lua @@ -167,8 +167,8 @@ local function oletools_check(task, content, digest, rule) m_autoexec = 'A' table.insert(analysis_keyword_table, a.keyword) elseif a.type == 'Suspicious' then - if rule.extended == true then m_suspicious = 'S' end - if a.keyword ~= 'Base64 Strings' and a.keyword ~= 'Hex Strings' + if rule.extended == true or + (a.keyword ~= 'Base64 Strings' and a.keyword ~= 'Hex Strings') then m_suspicious = 'S' table.insert(analysis_keyword_table, a.keyword) |