From 6936a2a52802ecceccb74a0feb522ee6e20219bd Mon Sep 17 00:00:00 2001 From: Wes <5124946+wesinator@users.noreply.github.com> Date: Sun, 4 Aug 2024 16:44:25 -0400 Subject: [PATCH] docs: minor updates to xor (#2098) --- docs/writingrules.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/writingrules.rst b/docs/writingrules.rst index 6547508560..b885abec5d 100644 --- a/docs/writingrules.rst +++ b/docs/writingrules.rst @@ -425,7 +425,7 @@ The above rule is logically equivalent to: any of them } -You can also combine the ``xor`` modifier with ``wide`` and ``ascii`` +You can also combine the ``xor`` modifier with ``fullword``, ``wide``, and ``ascii`` modifiers. For example, to search for the ``wide`` and ``ascii`` versions of a string after every single byte XOR has been applied you would use: @@ -465,7 +465,7 @@ equivalent: any of them } -Since YARA 3.11, if you want more control over the range of bytes used with the ``xor`` modifier use: +Since YARA 3.11, if you want more control over the range of bytes used with the ``xor`` modifier, use: .. code-block:: yara