Duplicate rule: SUSP_PowerShell_Download_Temp_Rundll

[lmontand]

Hello,

I would like to inform you that the rule SUSP_PowerShell_Download_Temp_Rundll is duplicated:

• Yara/Filetypes/powershell.yar
• Yara/PowerShell_Misc/download_variations.yar

The only difference is the filtering with the filesize parameter.

I noticed it by merging all rules into one file and compiling the file (which yields an error because of the duplicated identifier).

Thanks

[f0wl]

Hi, thanks for letting us know. The repository is in need of a clean-up anyway, we'll fix it soon :)