timb-machine · February 28, 2021 19:18
diff --git a/aix.yara b/aix.yara
 rule aix {
  meta:
    author = "Tim Brown @timb_machine"
    description = "AIX binary"
  strings:
    $libca = "libc.a"
    $text = ".text"
    $data = ".data"
  condition:
    $libca and $text and $data
 }
	rule aix {
	meta:
	author = "Tim Brown @timb_machine"
	description = "AIX binary"
	strings:
	$libca = "libc.a"
	$text = ".text"
	$data = ".data"
	condition:
	$libca and $text and $data
	}