97 lines
2.8 KiB
Plaintext
97 lines
2.8 KiB
Plaintext
{
|
|
"expr_rules": [
|
|
{
|
|
"rule_id": 301,
|
|
"pattern_num": 1,
|
|
"patterns": [
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "yes",
|
|
"is_hexbin": "no",
|
|
"pattern": "[W|w]orld dream"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"rule_id": 302,
|
|
"pattern_num": 2,
|
|
"patterns": [
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "yes",
|
|
"is_hexbin": "no",
|
|
"pattern": "[0-9]today"
|
|
},
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "yes",
|
|
"is_hexbin": "no",
|
|
"pattern": "[0-9]Lunch"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"rule_id": 303,
|
|
"pattern_num": 2,
|
|
"patterns": [
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "yes",
|
|
"is_hexbin": "no",
|
|
"pattern": "Cookie:\\s"
|
|
},
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "yes",
|
|
"is_hexbin": "no",
|
|
"pattern": "head"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"rule_id": 304,
|
|
"pattern_num": 2,
|
|
"patterns": [
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "no",
|
|
"is_hexbin": "no",
|
|
"pattern": "123^abc"
|
|
},
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "no",
|
|
"is_hexbin": "no",
|
|
"pattern": "^123"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"rule_id": 305,
|
|
"pattern_num": 2,
|
|
"patterns": [
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "no",
|
|
"is_hexbin": "no",
|
|
"pattern": "^123"
|
|
},
|
|
{
|
|
"pattern_type": "regex",
|
|
"match_method": "sub",
|
|
"case_sensitive": "no",
|
|
"is_hexbin": "no",
|
|
"pattern": "123^abc"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
} |