"rule polarSSL_servernames { meta: Author=""NCCIC trusted 3rd party"" Incident=""10135536"" Date = ""2018/04/19"" category = ""hidden_cobra"" family = ""n/a"" description = ""n/a"" strings: $polarSSL = ""fjiejffndxklfsdkfjsaadiepwn"" $sn1 = ""www.google.c