strings as attribution

strings residing within a malware sample can be used as a method of attribution.

When developing yara rules, detections, etc. be on the lookout for unique strings, error messages, misspellings, strange grammar, and other interesting strings.

---