// Detect It Easy: detection rule file format

init("protector", "Goliath");

function detect(bShowType, bShowVersion, bShowOptions) {
    if (PE.isNET()) {
        if (PE.isNetObjectPresent("ObfuscatedByGoliath")) {
            bDetected = true;
        } else if (PE.isSignatureInSectionPresent(0, "'.Goliath.NET.CodeShield.'")) {
            bDetected = true;
        }
    }

    return result(bShowType, bShowVersion, bShowOptions);
}