BIOC - suggestion for improvement

[Cyber1985]

Hey ho!

I've a suggestion for improvement:

BIOC - Browser downloads an .hta or .application file --> You could insert also brave browser.

iexplore.exe|chrome.exe|firefox.exe|opera.exe|microsoftedge.exe|microsoftedgecp.exe|safari.exe

Thanks

BR

Rob

[KanwarSingh01]

Hi @Cyber1985 

Generally I think customization of a BIOC rule should be on a Customer itself, I take BIOC rule by PA as more of an example for people like us and as well as detection rule for a generic environment not for a specific environment which means that if there is any rule which we think is not best for our environment we create a copy of that rule forked from PA BIOC rule and then add additional details accordingly for best interest of our environment.

So lets say you can add all the portable browsers in that rule along with wave, brave etc.

Thank you and Regards