From 2180c07c03cd69788f4d5d760d65ee47ad13c6f8 Mon Sep 17 00:00:00 2001
From: geekscrapy <11225502+geekscrapy@users.noreply.github.com>
Date: Mon, 19 May 2025 14:47:29 +0400
Subject: [PATCH] Make nocase accessible

---
 volatility3/framework/plugins/yarascan.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/volatility3/framework/plugins/yarascan.py b/volatility3/framework/plugins/yarascan.py
index 49db2af02..040a50c1a 100644
--- a/volatility3/framework/plugins/yarascan.py
+++ b/volatility3/framework/plugins/yarascan.py
@@ -182,7 +182,7 @@ class YaraScan(plugins.PluginInterface):
             rule = config["yara_string"]
             if rule[0] not in ["{", "/"]:
                 rule = f'"{rule}"'
-            if config.get("case", False):
+            if config.get("insensitive", False):
                 rule += " nocase"
             if config.get("wide", False):
                 rule += " wide ascii"