From d7285d69a73aad8afb4ee5ce648bc7ca7af638e4 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 11 Jul 2023 09:59:13 -0400
Subject: [PATCH] include *.yara

---
 salt/manager/tools/sbin_jinja/so-yara-update | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/manager/tools/sbin_jinja/so-yara-update b/salt/manager/tools/sbin_jinja/so-yara-update
index c1fea5dcd..ae2a0d97c 100755
--- a/salt/manager/tools/sbin_jinja/so-yara-update
+++ b/salt/manager/tools/sbin_jinja/so-yara-update
@@ -19,7 +19,7 @@ OUTPUTDIR=/opt/so/saltstack/local/salt/strelka/rules
 
 mkdir -p $OUTPUTDIR
 
-for i in $(find $SORULEDIR -name "*.yar"); do
+for i in $(find $SORULEDIR -name "*.yar" -o -name "*.yara"); do
   rule_name=$(echo $i | awk -F '/' '{print $NF}')
   if [[ ! "${excluded_rules}" =~ ${rule_name} ]]; then
     echo "Adding rule: $rule_name..."