// Detect It Easy: detection rule file
// Author: LinXP

// https://github.com/libyal/libmdmp/blob/main/documentation/Minidump%20(MDMP)%20format.asciidoc
meta("format", "Windows Minidump (.DMP)");

function detect() {
    if (Binary.getSize() >= 9) {
        if (Binary.compare("'MDMP'93A7")) {
            bDetected = true;
        }
    }

    return result();
}