host-interaction/file-system/read
rule:
meta:
name: read file on Linux
namespace: host-interaction/file-system/read
authors:
- joakim@intezer.com
scopes:
static: function
dynamic: thread
mbc:
- File System::Read File [C0051]
examples:
- 7351f8a40c5450557b24622417fc478d:0x4059AD
features:
- and:
- or:
- os: linux
- os: android
- optional:
- match: create or open file
- or:
- api: fgetc
- api: fgets
- api: getc
- api: getchar
- api: read
- api: getline
- api: getdelim
- api: fgetwc
- api: getwc
- api: fscanf
- api: vfscanf
- api: fread
last edited: 2024-04-23 11:49:05