Replace string with substring for Steam token rule

Signed-off-by: Still Hsu <dev@stillu.cc>
mandiant · Nov 14, 2024 · 13062aa · 13062aa
1 parent ffe6dd6
commit 13062aa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/collection/get-steam-token.yml b/collection/get-steam-token.yml
@@ -12,5 +12,5 @@ rule:
       - 2c83f152e09d0abaa3a3784669e75276784e50e1e202d16ab27e5741eef9ab4f:0x0041718C
   features:
     - or:
-      - string: "65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A"
+      - substring: "65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A"
       - substring: "eyAidHlwIjogIkpXVCIsICJ"