1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
rule test_1 {
condition:
"foo" contains "foo"
}
rule test_2 {
condition:
"foo" icontains "foo"
}
rule test_3 {
condition:
"foo" startswith "foo"
}
rule test_4 {
condition:
"foo" istartswith "foo"
}
rule test_5 {
condition:
"foo" endswith "foo"
}
rule test_6 {
condition:
"foo" iendswith "foo"
}
rule test_7 {
condition:
"foo" matches /foo/
}
rule test_8 {
condition:
"foo" matches /foo/is
}
rule test_9 {
condition:
"foo" iequals "foo"
}