[Oisf-users] Ransomware detection

[Alexis Fredes Hadad]

Hello everyone!
I want to know if there is any rule for ransomware detection in Suricata. I
know that Suricata is not the more appropiate tool for that kind of malware
but I was investigating how to do a rule with pcre. Anyone knows if exist a
rule for that? Or a rule set which contain that? At present I am using the
free version of Emerging Threats and it has a file of rules for malware but
I couldn't find nothing related to ransomware.

Thanks,
Alexis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170629/81d82bb4/attachment.html>