These Suricata/Snort signatures are modified version supplied by the Fireeye Team for "Sunburst". The original signatures are at https://github.com/fireeye/sunburst_countermeasures
Modifications:
- Signature ID do not interfere with Cisco Talos or Emerging Threats IDs.
- Fireeye signatures lacked a "classtype". A class type of "trojan-activity".
- Added "reference" data.