mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
bd31ca55f3
Add a new detection rule db/PE/library_SSH_NET.sg that identifies the SSH.NET .NET library by checking for the presence of the Renci.SshNet object. The rule includes a library meta tag and author/contact metadata to help PE analysis detect SSH.NET in binaries.
17 lines
No EOL
343 B
JavaScript
17 lines
No EOL
343 B
JavaScript
// Detect It Easy: detection rule file
|
|
|
|
// Author: DosX
|
|
// E-Mail: collab@kay-software.ru
|
|
// GitHub: https://github.com/DosX-dev
|
|
// Telegram: @DosX_dev
|
|
|
|
// https://github.com/sshnet/SSH.NET
|
|
meta("library", "SSH.NET");
|
|
|
|
function detect() {
|
|
if (PE.isNetObjectPresent("Renci.SshNet")) {
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |