From ce8d6a93c33707b9b41bf0231d86becb1dd0bb70 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 11 Jul 2019 22:59:05 +0200
Subject: [PATCH] chg: [yara] add a yara-rule-name field which can be optional
 or the only field

As requested in https://github.com/MISP/MISP/issues/4858
---
 objects/yara/definition.json | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/objects/yara/definition.json b/objects/yara/definition.json
index 370bfdb..4b9ba94 100644
--- a/objects/yara/definition.json
+++ b/objects/yara/definition.json
@@ -1,6 +1,7 @@
 {
   "requiredOneOf": [
-    "yara"
+    "yara",
+    "yara-rule-name"
   ],
   "attributes": {
     "comment": {
@@ -13,6 +14,11 @@
       "ui-priority": 0,
       "misp-attribute": "yara"
     },
+    "yara-rule-name": {
+      "description": "YARA rule name.",
+      "ui-priority": 0,
+      "misp-attribute": "text"
+    },
     "version": {
       "sane_default": [
         "3.7.1"
@@ -33,8 +39,8 @@
       "ui-priority": 0
     }
   },
-  "version": 3,
-  "description": "An object describing a YARA rule along with its version.",
+  "version": 4,
+  "description": "An object describing a YARA rule (or a YARA rule name) along with its version.",
   "meta-category": "misc",
   "uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3",
   "name": "yara"