Oni Ransomware Detection

This rule detects the Oni ransomware based on specific byte patterns ($find_files, $encrypt_files, $search_processes) found within executable files. The patterns indicate functionality related to searching for files, encrypting them, and potentially enumerating processes, which are characteristic behaviors of ransomware.