diff --git a/regexes.txt b/regexes.txt index f59a379..30a9312 100644 --- a/regexes.txt +++ b/regexes.txt @@ -15,5 +15,5 @@ Type,regex,string # Generic cvtres.exe alert, comment out if experiencing false positives 0,\\cvtres\.exe.*,Resource File To COFF Object Conversion Utility cvtres.exe 0,\\cvtres\.exe.*\\AppData\\Local\\Temp\\[A-Z0-9]{7}\.tmp,PSAttack-style command via cvtres.exe -1,^[a-zA-Z]{22}$,Metasploit-style service name: 22 characters, [A-Za-z] -1,^[a-zA-Z]{16}$,Metasploit-style service name: 16 characters, [A-Za-z] \ No newline at end of file +1,^[a-zA-Z]{22}$,Metasploit-style service name: 22 characters +1,^[a-zA-Z]{16}$,Metasploit-style service name: 16 characters \ No newline at end of file