Skip to content

Commit dbb0d26

Browse files
Update Symbolic_Link_Files_Macros_File_Characteristic.rule
1 parent d6f603b commit dbb0d26

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Symbolic_Link_Files_Macros_File_Characteristic.rule

+1
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ rule Symbolic_Link_Files_Macros_File_Characteristic
33

44
meta:
55
Author = "InQuest Labs"
6+
URL = "https://github.com/InQuest/yara-rules/edit/master/Symbolic_Link_Files_Macros_File_Characteristic.rule"
67
Description = "This signature detects Symbolic Link (SLK) files that contain Excel 4.0 macros. While not inherently malicious, these SLK files can be used used by attackers to evade detection and deliver malicious payloads."
78
References = "https://outflank.nl/blog/2019/10/30/abusing-the-sylk-file-format/"
89

0 commit comments

Comments
 (0)