and change rule

sublime-security · Dec 27, 2023 · de8c382 · de8c382
1 parent 5c3016c
commit de8c382
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/detection-rules/attachment_adobe_image_lure_qr_code.yml b/detection-rules/attachment_adobe_image_lure_qr_code.yml
@@ -27,6 +27,7 @@ source: |
                 regex.icontains(.scan.ocr.raw, 'scan|camera')
                 and regex.icontains(.scan.ocr.raw, '\bQR\b|Q\.R\.|barcode')
             )
+  
             or (
               any(file.explode(.),
                   .scan.qr.type == "url"