Project

General

Profile

Actions
Copy link

Feature #4279

open

Optionally allow hashing truncated files, and a maximum length to hash

Added by Jeff Weeks over 4 years ago. Updated about 1 year ago.

Status:
In Review
Priority:
Normal
Assignee:
Jeff Weeks
Target version:
TBD
Effort:
Difficulty:
Label:

Description

The hash of a truncated file is still valuable information, as is the hash of the first N bytes of a file.
Both of these can be optionally enabled via configuration.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Bug #6161: file-store: missing hash on TRUNCATED filesFeedbackAndreas HerzActions
Actions
Copy link
 #1

Updated by Jason Ish almost 4 years ago

  • Status changed from New to In Review
Actions
Copy link
 #2

Updated by Philippe Antoine about 1 year ago

  • Target version set to TBD
Actions
Copy link
 #3

Updated by Philippe Antoine 8 days ago

  • Related to Bug #6161: file-store: missing hash on TRUNCATED files added
Actions
Copy link

Also available in: Atom PDF