admin/RmEye
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
huoji
2022-09-05 16:47:31 +08:00
parent d503827ad0
commit 642ca43cdc
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@@ -27,7 +27,7 @@ https://key08.com/index.php/2022/08/09/1505.html
### 最新新闻
2022/9/5:
增加规则编写教程:
https://github.com/RoomaSec/RmEye/doc_rule.md
https://github.com/RoomaSec/RmEye/blob/main/doc_rule.md
2022/8/31:
增加进程白名单系统,现在能给进程加白名单了.在打开进程链后,点击某个进程加入白名单即可
@@ -141,9 +141,10 @@ rule_engine:
分数代表的是本次规则给进程链所增加的分数,报警是根据前面的MAX_THREAT_SCORE设置的
规则编写教程请移步:
https://github.com/RoomaSec/RmEye/doc_rule.md
https://github.com/RoomaSec/RmEye/blob/main/doc_rule.md
规则引擎的语法请移步:
https://github.com/zeroSteiner/rule-engine
https://github.com/zeroSteiner/rule-engine
yara,需要安装插件,具体请看交流部分