##Intent
Keep rules **small**, versioned, and mapped to **families** or **behaviors**.
rule MALREV0X_Example
{
meta:
id = "TLS-001"
created = "2026-04-06"
strings:
$s1 = "example" nocase
condition:
all of them
}Keep rules **small**, versioned, and mapped to **families** or **behaviors**.
rule MALREV0X_Example
{
meta:
id = "TLS-001"
created = "2026-04-06"
strings:
$s1 = "example" nocase
condition:
all of them
}