From e587b1728e45239142993de2ff43ff8286c74de9 Mon Sep 17 00:00:00 2001
From: egibs <20933572+egibs@users.noreply.github.com>
Date: Thu, 5 Jun 2025 09:15:16 -0500
Subject: [PATCH] Fix third-party rule breaking automated updates

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
---
 third_party/yara/update.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/third_party/yara/update.sh b/third_party/yara/update.sh
index 8544d3237..8f9407982 100755
--- a/third_party/yara/update.sh
+++ b/third_party/yara/update.sh
@@ -67,6 +67,8 @@ function update_dep() {
 		find "${tmpdir}" \( -name "*.yar*" -o -name "*LICENSE*" \) -print -exec cp {} "${kind}" \;
 		# error: rule "BOINC" in boinc.yar(1): syntax error, unexpected identifier, expecting '{'
 		rm "${kind}/boinc.yar"
+		# ^ expecting pattern modifier, pattern identifier or `condition`, found `}` (missing condition field)
+		rm "${kind}/defendnot_tool.yar"
 		;;
 	InQuest-VT)
 		rel=$(git_clone https://github.com/InQuest/yara-rules-vt.git "${tmpdir}")