import "hash"

rule bulwark_https_bulwarkblack_com_anydesk_linux_preauth_root_rce_exposure_controls
{
    meta:
        author = "Bulwark Black LLC"
        source = "https://bulwarkblack.com/anydesk-linux-preauth-root-rce-exposure-controls/"
        description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule."
        generated = "2026-10-09T15:05:26Z"
        tlp = "TLP:CLEAR"
        indicator_count = "1"
    condition:
        hash.sha256(0, filesize) == "62ee04ad48dc039dd9c927f998e56143c87a9c5e12d28654f78c7f6340394f5a"
}