From d6d515d3d88b8e93102490798ce66b32aa02911c Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Wed, 30 Dec 2020 14:46:04 +0100
Subject: [PATCH] chg: [yara] disable correlations on some fields

---
 objects/yara/definition.json | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/objects/yara/definition.json b/objects/yara/definition.json
index 01d747c..be27fac 100644
--- a/objects/yara/definition.json
+++ b/objects/yara/definition.json
@@ -7,6 +7,7 @@
     },
     "context": {
       "description": "Context where the YARA rule can be applied",
+      "disable_correlation": true,
       "misp-attribute": "text",
       "sane_default": [
         "all",
@@ -18,6 +19,7 @@
     },
     "version": {
       "description": "Version of the YARA rule depending where the yara rule is known to work as expected.",
+      "disable_correlation": true,
       "misp-attribute": "text",
       "sane_default": [
         "3.7.1"
@@ -43,5 +45,5 @@
     "yara-rule-name"
   ],
   "uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3",
-  "version": 4
+  "version": 5
 }
\ No newline at end of file