[New post] 100 Days of YARA – Day 41: nmap

Daniel posted: " For reasons similar to masscan, it is worth investigating if Nmap is discovered on an unexpected host. rule nmap { meta: description = "Nmap network scanner" reference = "https://nmap.org" strings: $ = "Usage: nmap [Scan Type(s)] [O" Respond to this post by replying above this line New post on DMFR SECURITY 100 Days of YARA – Day 41: nmap by Daniel For reasons similar to masscan, it is worth investigating if Nmap is discovered on an unexpected host. rule nmap { meta: description = "Nmap network scanner" reference = "https://nmap.org" strings: $ = "Usage: nmap [Scan Type(s)] [Options] {target specification}" condition: all of them } YARA Rules Index Daniel | January 29, 2022 at 10:00 am | Tags: nmap, yara | Categories: 100 days of Yara | URL: https://wp.me/p8aFuC-2hO Comment    See all comments    Like Unsubscribe to no longer receive posts from DMFR SECURITY. Change your email settings at Manage Subscriptions. Trouble clicking? Copy and paste this URL into your browser: http://dmfrsecurity.com/2022/01/29/100-days-of-yara-day-41-nmap/ Thanks for flying with WordPress.com