so-rule update that contains !1

[chris-ci]

Wanted to pass this along to help others run into this issue.

My issue was when I ran so-rule modify add that contained a replace string of isdataat:!1 and the !1 portion after I pressed enter would replace that with the value from history.

[chris-ci]

After talking with support I was putting double-quotes around my parameters so the fix was to use single quotes. For example what I was originally trying to use so-rule modify add 2025705 "classtype:bad-unknown" "content:\"D|00|o|00|n|00|o|00|t|00|l|00|o|00|g|00 2E 00|p|00|s|00|1|00|\"; nocase; distance:0; isdataat:!1,relative; classtype:bad-unknown"

What I had to change it to was so-rule modify add 2025705 'classtype:bad-unknown' 'content:\"D|00|o|00|n|00|o|00|t|00|l|00|o|00|g|00 2E 00|p|00|s|00|1|00|\"; nocase; distance:0; isdataat:!1,relative; classtype:bad-unknown'