Detect Tiny Vbs
This YARA rule detects Visual Basic Script (VBS) files that contain common keywords often used in malicious VBScripts. Specifically, it looks for the presence of 'Dim' (for variable declaration), 'Wscript.Shell' (to interact with the operating system shell), 'End Function' (a VBScript construct), and 'CreateObject' (to create COM objects). The rule is designed to identify potentially malicious VBS files, possibly used for execution, persistence, or other adversarial activities.
YARA
