Merge pull request #861 from ruppde/master

Update reference-analysis-tools-strings.yml
mandiant · Jan 23, 2024 · e09a22d · e09a22d
2 parents 44a60c0 + d2bc78f
commit e09a22d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/anti-analysis/reference-analysis-tools-strings.yml b/anti-analysis/reference-analysis-tools-strings.yml
@@ -24,8 +24,8 @@ rule:
       - string: /procmon(\.exe)?/i
       - string: /regmon(\.exe)?/i
       - string: /procexp(\.exe)?/i
-      - string: /ida[gqtuw]?(\.exe)?$/i
-      - string: /ida[gqtuw]64(\.exe)?$/i
+      - string: /(?<!\w)ida[gqtuw]?(\.exe)?$/i
+      - string: /ida[gqtuw]?64(\.exe)?$/i
       - string: /ImmunityDebugger(\.exe)?/i
       - string: /Wireshark(\.exe)?/i
       - string: /dumpcap(\.exe)?/i