Fix the YARA assembly workflow

.github/workflows/yara-assemble.yml

@@ -21,7 +21,7 @@ jobs:
 
       # Assemble all *.yar files (except those requiring external variables)
       - name: Assemble all Yara files
-        run: "for f in $GITHUB_WORKSPACE/yara/*.yar; do if [[ (\"${f##*/}\" != \"generic_anomalies.yar\") && (\"${f##*/}\" != \"general_cloaking.yar\") && (\"${f##*/}\" != \"thor_inverse_matches.yar\") && (\"${f##*/}\" != \"yara_mixed_ext_vars.yar\") && (\"${f##*/}\" != \"gen_webshells_ext_vars.yar\") && (\"${f##*/}\" != \"configured_vulns_ext_vars.yar\") ]]; then cat $f >> signature-base.yar; fi;done"
+        run: "for f in $GITHUB_WORKSPACE/yara/*.yar; do if [[ (\"${f##*/}\" != \"generic_anomalies.yar\") && (\"${f##*/}\" != \"general_cloaking.yar\") && (\"${f##*/}\" != \"gen_webshells_ext_vars.yar\") && (\"${f##*/}\" != \"thor_inverse_matches.yar\") && (\"${f##*/}\" != \"yara_mixed_ext_vars.yar\") && (\"${f##*/}\" != \"configured_vulns_ext_vars.yar\") && (\"${f##*/}\" != \"gen_fake_amsi_dll.yar\") && (\"${f##*/}\" != \"expl_citrix_netscaler_adc_exploitation_cve_2023_3519.yar\") && (\"${f##*/}\" != \"yara-rules_vuln_drivers_strict_renamed.yar\") ]]; then cat $f >> signature-base.yar; fi;done"
 
       # Upload the assembled Yara artifact
       - name: Upload the resulting Yara artifact

README.md

@@ -30,7 +30,8 @@ Using the YARA rules in a tool other than [LOKI](https://github.com/Neo23x0/Loki
 - ./yara/configured_vulns_ext_vars.yar
 - ./yara/gen_fake_amsi_dll.yar
 - ./yara/expl_citrix_netscaler_adc_exploitation_cve_2023_3519.yar
-
+- ./yara/yara-rules_vuln_drivers_strict_renamed.yar
+<!-- When adding entries, also update .github/workflows/yara-assemble.yml -->
 Just remove these files in case you see the above error message.
 
 ## High Quality YARA Rules Feed