From 5069d1163cca569c9651bfab244770f155cd9a39 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 10 Jul 2023 14:36:34 -0400
Subject: [PATCH] only *.yar files

---
 salt/manager/tools/sbin_jinja/so-yara-update | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/manager/tools/sbin_jinja/so-yara-update b/salt/manager/tools/sbin_jinja/so-yara-update
index c54997481..c1fea5dcd 100755
--- a/salt/manager/tools/sbin_jinja/so-yara-update
+++ b/salt/manager/tools/sbin_jinja/so-yara-update
@@ -19,7 +19,7 @@ OUTPUTDIR=/opt/so/saltstack/local/salt/strelka/rules
 
 mkdir -p $OUTPUTDIR
 
-for i in $(find $SORULEDIR -name "*.yar*"); do
+for i in $(find $SORULEDIR -name "*.yar"); do
   rule_name=$(echo $i | awk -F '/' '{print $NF}')
   if [[ ! "${excluded_rules}" =~ ${rule_name} ]]; then
     echo "Adding rule: $rule_name..."