W32.Bugbear Detection Rule

Based on this article from Symantec, pulled Dec 03 2015

W32.Bugbear@mm Technical Details | Symantec

ZIP includes a User Defined Group for the list of processes, and a rule. Both can be imported into LEM, though you may have to re-add the group to the Rule.

Created in response to this thread: W32.Bugbear

Bugbear Rule.zip

Find more posts tagged with

lem_rule

content_exchange

lem

Accepted answers

All comments

twuk

Hi and thanks for the work you put in to this

Do I have to edit this in any way

I get an alert on

Error The Value in the comparison table is not available

curtisi

Have you imported the UDG that was included as well? You may need to do that, then close and re-open the rule.

tkiteley

Since I am new to LEM, how does one go about importing??

Thanks!

Quick Links

All Categories
Recent Posts
Activity
Unanswered
Groups
Help
Best Of