[Oisf-users] Disable rule based on content

[C. L. Martinez]

Hi all,

 I have a problem with the rule 2018456 (ET TROJAN ELF/Mayhem
Checkin). It is triggered with legitimate content.

 How can I disable this rule only when content is legitimate?

Thanks.