From 7eefd99ab917b731e0be67921260021fd959926f Mon Sep 17 00:00:00 2001 From: dubfib <81378985+dubfib@users.noreply.github.com> Date: Mon, 25 Nov 2024 02:31:50 -0800 Subject: [PATCH] fix: revert back to normal i was testing the workflow to make sure it validates correctly --- infostealer/Win32.Infostealer.Discord.yara | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infostealer/Win32.Infostealer.Discord.yara b/infostealer/Win32.Infostealer.Discord.yara index 5e3a507..69db533 100644 --- a/infostealer/Win32.Infostealer.Discord.yara +++ b/infostealer/Win32.Infostealer.Discord.yara @@ -23,7 +23,7 @@ rule Win32_Infostealer_Discord $webhook = /https:\/\/(canary\.|ptb\.)?discord(app)?\.com\/api\/webhooks\/[0-9]{17,19}/i $token = /[\w-]{26}\.[\w-]{6}\.[\w-]{38}/i -frkjelkjfrewjklgjewkljglkjewg + condition: any of ($path, $ldb, $log) or ($webhook and $token)