From cceef54309ae4df583ff565d4fa7f40fd2b9f47c Mon Sep 17 00:00:00 2001
From: mmorenog <mmorenog@users.noreply.github.com>
Date: Tue, 29 Mar 2016 13:19:11 +0200
Subject: [PATCH] Update scam.yar

---
 email/scam.yar | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/email/scam.yar b/email/scam.yar
index d64345e..0d5e062 100644
--- a/email/scam.yar
+++ b/email/scam.yar
@@ -3,7 +3,7 @@
     long as you use it under this license.
 */
 
-rule content {
+rule content : mail {
 	meta:
 		author = "A.Sanchez <asanchez@koodous.com>"
 		description = "Detects scam emails with phishing attachment."
@@ -17,7 +17,7 @@ rule content {
 		all of them
 }
 
-rule attachment {
+rule attachment : mail {
 	meta:
 		author = "A.Sanchez <asanchez@koodous.com>"
 		description = "Detects scam emails with phishing attachment."
@@ -32,4 +32,4 @@ rule attachment {
 		
 	condition:
 		all of them
-}
\ No newline at end of file
+}