From 2fc7f8482a95475985098146ca842f95e5308637 Mon Sep 17 00:00:00 2001 From: Evan Gibler <20933572+egibs@users.noreply.github.com> Date: Mon, 1 Jul 2024 10:08:59 -0500 Subject: [PATCH] Turn off MALPEDIA_Win_Unidentified_107_Auto rule (#298) Signed-off-by: egibs <20933572+egibs@users.noreply.github.com> --- pkg/compile/compile.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pkg/compile/compile.go b/pkg/compile/compile.go index af603acd8..9a3c6b9ca 100644 --- a/pkg/compile/compile.go +++ b/pkg/compile/compile.go @@ -20,7 +20,8 @@ var FS = rules.FS // badRules are noisy 3rd party rules to silently disable. var badRules = map[string]bool{ // YARAForge - "GODMODERULES_IDDQD_God_Mode_Rule": true, + "GODMODERULES_IDDQD_God_Mode_Rule": true, + "MALPEDIA_Win_Unidentified_107_Auto": true, // ThreatHunting Keywords (some duplicates) "scp_greyware_tool_keyword": true, "Antivirus_Signature_signature_keyword": true,