Volatility3 MCP Server

/* This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license. */ rule cve_2013_0074 { meta: author = "Kaspersky Lab" filetype = "Win32 EXE" date = "2015-07-23" version = "1.0" strings: $b2="Can't find Payload() address" ascii wide $b3="/SilverApp1;component/App.xaml" ascii wide $b4="Can't allocate ums after buf[]" ascii wide $b5="------------ START ------------" condition: ( (2 of ($b*)) ) }