From 1af6975e9c5336da0a4051b3202c8610747784ac Mon Sep 17 00:00:00 2001
From: decalage2 <decalage@laposte.net>
Date: Mon, 5 Sep 2016 22:17:15 +0200
Subject: [PATCH] olevba: added hint when to use option --deobf - issue #40

---
 oletools/olevba.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/oletools/olevba.py b/oletools/olevba.py
index 16e0869..a4ac25b 100755
--- a/oletools/olevba.py
+++ b/oletools/olevba.py
@@ -546,7 +546,7 @@ SUSPICIOUS_KEYWORDS = {
     'May attempt to obfuscate malicious function calls':
         ('CallByName',),
     #CallByName: http://msdn.microsoft.com/en-us/library/office/gg278760%28v=office.15%29.aspx
-    'May attempt to obfuscate specific strings':
+    'May attempt to obfuscate specific strings (use option --deobf to deobfuscate)':
     #TODO: regex to find several Chr*, not just one
         ('Chr', 'ChrB', 'ChrW', 'StrReverse', 'Xor'),
     #Chr: http://msdn.microsoft.com/en-us/library/office/gg264465%28v=office.15%29.aspx
--
libgit2 0.21.4