zhaolei
43cfb0fe69
- L4-005: 加入 'meshsafe-hot-reload-test-string' → Newly_Added_Rule_Test - L4-010: 加入 'powershell -enc SQBFAFgAI...' → Regex_Shell_Pattern 对账进步: 162/168 → 164/168 (97.6%)，剩余 4 条为样本占位符
6 lines
165 B
Plaintext
6 lines
165 B
Plaintext
# MeshSafe YARA regex rule test sample
|
|
# This should trigger Regex_Shell_Pattern
|
|
|
|
attacker payload:
|
|
powershell -enc SQBFAFgAIAAoACgAbgBlAHcALQAtAG8AYgBqAGUAYwB0ACAA
|