From 954cfeb10a3de96e056c0d865d51c129b028e790 Mon Sep 17 00:00:00 2001 From: nichogenius Date: Thu, 27 Jul 2017 07:41:58 -0600 Subject: [PATCH] Adding base_convert as a test base_convert seems like a rare enough function... trying it out to see if it generates many fp's. --- patterns_raw.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/patterns_raw.txt b/patterns_raw.txt index e5b838c..6ae20e7 100644 --- a/patterns_raw.txt +++ b/patterns_raw.txt @@ -112,6 +112,7 @@ eval(base64_decode( $data = base64_decode(" edoced_46esab base=base64_encode +base_convert #Malware/Attack specific strings/fingerprints/signatures