{"action":"created","issue":{"url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/issues/145","repository_url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs","labels_url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/issues/145/labels{/name}","comments_url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/issues/145/comments","events_url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/issues/145/events","html_url":"https://github.com/extremeshok/clamav-unofficial-sigs/issues/145","id":169759695,"number":145,"title":"Rule collision","user":{"login":"szepeviktor","id":952007,"avatar_url":"https://avatars.githubusercontent.com/u/952007?v=3","gravatar_id":"","url":"https://api.github.com/users/szepeviktor","html_url":"https://github.com/szepeviktor","followers_url":"https://api.github.com/users/szepeviktor/followers","following_url":"https://api.github.com/users/szepeviktor/following{/other_user}","gists_url":"https://api.github.com/users/szepeviktor/gists{/gist_id}","starred_url":"https://api.github.com/users/szepeviktor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/szepeviktor/subscriptions","organizations_url":"https://api.github.com/users/szepeviktor/orgs","repos_url":"https://api.github.com/users/szepeviktor/repos","events_url":"https://api.github.com/users/szepeviktor/events{/privacy}","received_events_url":"https://api.github.com/users/szepeviktor/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"extremeshok","id":5957328,"avatar_url":"https://avatars.githubusercontent.com/u/5957328?v=3","gravatar_id":"","url":"https://api.github.com/users/extremeshok","html_url":"https://github.com/extremeshok","followers_url":"https://api.github.com/users/extremeshok/followers","following_url":"https://api.github.com/users/extremeshok/following{/other_user}","gists_url":"https://api.github.com/users/extremeshok/gists{/gist_id}","starred_url":"https://api.github.com/users/extremeshok/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/extremeshok/subscriptions","organizations_url":"https://api.github.com/users/extremeshok/orgs","repos_url":"https://api.github.com/users/extremeshok/repos","events_url":"https://api.github.com/users/extremeshok/events{/privacy}","received_events_url":"https://api.github.com/users/extremeshok/received_events","type":"User","site_admin":false},"assignees":[{"login":"extremeshok","id":5957328,"avatar_url":"https://avatars.githubusercontent.com/u/5957328?v=3","gravatar_id":"","url":"https://api.github.com/users/extremeshok","html_url":"https://github.com/extremeshok","followers_url":"https://api.github.com/users/extremeshok/followers","following_url":"https://api.github.com/users/extremeshok/following{/other_user}","gists_url":"https://api.github.com/users/extremeshok/gists{/gist_id}","starred_url":"https://api.github.com/users/extremeshok/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/extremeshok/subscriptions","organizations_url":"https://api.github.com/users/extremeshok/orgs","repos_url":"https://api.github.com/users/extremeshok/repos","events_url":"https://api.github.com/users/extremeshok/events{/privacy}","received_events_url":"https://api.github.com/users/extremeshok/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/milestones/4","html_url":"https://github.com/extremeshok/clamav-unofficial-sigs/milestones/5.5","labels_url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/milestones/4/labels","id":1898918,"number":4,"title":"5.5","description":null,"creator":{"login":"extremeshok","id":5957328,"avatar_url":"https://avatars.githubusercontent.com/u/5957328?v=3","gravatar_id":"","url":"https://api.github.com/users/extremeshok","html_url":"https://github.com/extremeshok","followers_url":"https://api.github.com/users/extremeshok/followers","following_url":"https://api.github.com/users/extremeshok/following{/other_user}","gists_url":"https://api.github.com/users/extremeshok/gists{/gist_id}","starred_url":"https://api.github.com/users/extremeshok/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/extremeshok/subscriptions","organizations_url":"https://api.github.com/users/extremeshok/orgs","repos_url":"https://api.github.com/users/extremeshok/repos","events_url":"https://api.github.com/users/extremeshok/events{/privacy}","received_events_url":"https://api.github.com/users/extremeshok/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":0,"state":"open","created_at":"2016-07-22T13:41:53Z","updated_at":"2016-08-09T13:29:39Z","due_on":null,"closed_at":null},"comments":10,"created_at":"2016-08-06T18:29:51Z","updated_at":"2016-08-09T23:00:27Z","closed_at":null,"body":"Both Sanesecurity's `winnow_malware.yara` and `Yara-Rules's EMAIL_Cryptowall.yar` contain:\r\n`rule docx_macro` **and** `CryptoWall_Resume_phish`\r\n\r\nclamav-daemon refuses to start\r\nhttps://travis-ci.org/extremeshok/clamav-unofficial-sigs/builds/150301900#L775\r\n"},"comment":{"url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/issues/comments/238718369","html_url":"https://github.com/extremeshok/clamav-unofficial-sigs/issues/145#issuecomment-238718369","issue_url":"https://api.github.com/repos/extremeshok/clamav-unofficial-sigs/issues/145","id":238718369,"user":{"login":"szepeviktor","id":952007,"avatar_url":"https://avatars.githubusercontent.com/u/952007?v=3","gravatar_id":"","url":"https://api.github.com/users/szepeviktor","html_url":"https://github.com/szepeviktor","followers_url":"https://api.github.com/users/szepeviktor/followers","following_url":"https://api.github.com/users/szepeviktor/following{/other_user}","gists_url":"https://api.github.com/users/szepeviktor/gists{/gist_id}","starred_url":"https://api.github.com/users/szepeviktor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/szepeviktor/subscriptions","organizations_url":"https://api.github.com/users/szepeviktor/orgs","repos_url":"https://api.github.com/users/szepeviktor/repos","events_url":"https://api.github.com/users/szepeviktor/events{/privacy}","received_events_url":"https://api.github.com/users/szepeviktor/received_events","type":"User","site_admin":false},"created_at":"2016-08-09T23:00:27Z","updated_at":"2016-08-09T23:00:27Z","body":"There is hop.\r\n```bash\r\nsed -n -e '1h;1!H;$ {g;s|rule|`|g;s|\\n\\([ \\t]*`[^\\n]\\+\\n\\([^\\n`]*\\n\\)*\\([^\\n]*pe\\.[^\\n]*\\n\\)\\([^\\n`]*\\n\\)*\\([ \\t]*}\\)\\)|\\n/*\\1*/\\n|g;s|`|rule|g;p}'\r\n\r\n1h;1!H;$ {g; =process multiline match\r\ns|rule|`|g; =hack! \"rule\" <-> backtick\r\ns|\\n\\([ \\t]*`[^\\n]\\+\\n =start with a \"rule\" line\r\n\\([^\\n`]*\\n\\)* =some lines\r\n\\([^\\n]*pe\\.[^\\n]*\\n\\) = the \"pe.\" line\r\n\\([^\\n`]*\\n\\)* =some lines\r\n\\([ \\t]*}\\)\\) =closing \"}\"\r\n|\\n/*\\1*/\\n|g; =enclose in quotes\r\ns|`|rule|g; =revert \"rule\"\r\n```\r\n"}}
{"actor":{"display_login":"szepeviktor"}}