From 39787da1282bb4c828d58cfddde6772cb9fa926c Mon Sep 17 00:00:00 2001
From: Jonhnathan <jonhnathancesar@gmail.com>
Date: Thu, 15 Oct 2020 23:19:56 -0300
Subject: [PATCH] Update proxy_cobalt_ocsp.yml

---
 rules/proxy/proxy_cobalt_ocsp.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/proxy/proxy_cobalt_ocsp.yml b/rules/proxy/proxy_cobalt_ocsp.yml
index e57a85e6a..d657963aa 100644
--- a/rules/proxy/proxy_cobalt_ocsp.yml
+++ b/rules/proxy/proxy_cobalt_ocsp.yml
@@ -16,7 +16,7 @@ logsource:
     category: proxy
 detection:
     selection:
-      c-uri: '*/oscp/*'
+      c-uri|contains: '/oscp/'
       cs-host: 'ocsp.verisign.com'
 
     condition: selection