diff --git a/README.md b/README.md index 53e0692..e91512f 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,7 @@ https://key08.com/index.php/2022/08/09/1505.html ### 最新新闻 2022/9/5: 增加规则编写教程: -https://github.com/RoomaSec/RmEye/doc_rule.md +https://github.com/RoomaSec/RmEye/blob/main/doc_rule.md 2022/8/31: 增加进程白名单系统,现在能给进程加白名单了.在打开进程链后,点击某个进程加入白名单即可 @@ -141,9 +141,10 @@ rule_engine: 分数代表的是本次规则给进程链所增加的分数,报警是根据前面的MAX_THREAT_SCORE设置的 规则编写教程请移步: -https://github.com/RoomaSec/RmEye/doc_rule.md +https://github.com/RoomaSec/RmEye/blob/main/doc_rule.md + 规则引擎的语法请移步: -https://github.com/zeroSteiner/rule-engine +https://github.com/zeroSteiner/rule-engine yara,需要安装插件,具体请看交流部分