mirror of
https://github.com/VirusTotal/yara.git
synced 2026-10-11 22:49:58 +00:00
docs: minor updates to xor (#2098)
This commit is contained in:
@@ -425,7 +425,7 @@ The above rule is logically equivalent to:
|
||||
any of them
|
||||
}
|
||||
|
||||
You can also combine the ``xor`` modifier with ``wide`` and ``ascii``
|
||||
You can also combine the ``xor`` modifier with ``fullword``, ``wide``, and ``ascii``
|
||||
modifiers. For example, to search for the ``wide`` and ``ascii`` versions of a
|
||||
string after every single byte XOR has been applied you would use:
|
||||
|
||||
@@ -465,7 +465,7 @@ equivalent:
|
||||
any of them
|
||||
}
|
||||
|
||||
Since YARA 3.11, if you want more control over the range of bytes used with the ``xor`` modifier use:
|
||||
Since YARA 3.11, if you want more control over the range of bytes used with the ``xor`` modifier, use:
|
||||
|
||||
.. code-block:: yara
|
||||
|
||||
|
||||
Reference in New Issue
Block a user