timb-machine / timb-machine/linux-malware
[Intel]: adonunix2.yara
Open
Nobody has claimed this yet.
missing:tactics
new
- Dominant language
- HTML
- Stars
- 1.2k
- Forks
- 95
- PR merge metrics
- No merged PRs in 30d
Description
Area
Personal rules
Parent threat
No response
Finding
adonunix2.yara
Industry reference
Hunts for binaries that attack AD on UNIX
Malware reference
No response
Actor reference
No response
Component
No response
Scenario
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the issue's Finding, adonunix2.yara, and its stated purpose of hunting binaries that attack AD on UNIX. Check how this finding is represented in the repository and compare it with the project's existing personal rules. Done means the adonunix2.yara finding is incorporated consistently with those rules.
Written by the indexing model from the issue text.
Assessment
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100