identify ATM dispenser service provider

rule:
  meta:
    name: identify ATM dispenser service provider
    namespace: targeting/automated-teller-machine
    authors:
      - william.ballenthin@mandiant.com
    scopes:
      static: file
      dynamic: file
    references:
      - https://doc.axxonsoft.com/confluence/display/atm70en/Configuring+the+connection+to+the+dispenser+service+provider
    examples:
      - b2ad4409323147b63e370745e5209996
      - 1f094dd65be477d15d871e72f0fdce5e
  features:
    - or:
      - string: "CurrencyDispenser1"
        description: NCR
      - string: "CDM30"
        description: Wincor
      - string: "DBD_AdvFuncDisp"
        description: Diebold