Project

General

Profile

Actions
Copy link

Feature #4279

open
JW JW

Optionally allow hashing truncated files, and a maximum length to hash

Feature #4279: Optionally allow hashing truncated files, and a maximum length to hash

Added by Jeff Weeks about 5 years ago. Updated 1 day ago.

Status:
Assigned
Priority:
Normal
Assignee:
Jeff Weeks
Target version:
TBD
Effort:
Difficulty:
Label:

Description

The hash of a truncated file is still valuable information, as is the hash of the first N bytes of a file.
Both of these can be optionally enabled via configuration.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #6161: file-store: missing hash on TRUNCATED filesFeedbackAndreas HerzActions

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #1

  • Status changed from New to In Review

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #2

  • Target version set to TBD

PA Updated by Philippe Antoine 9 months ago Actions
Copy link
 #3

  • Related to Feature #6161: file-store: missing hash on TRUNCATED files added

PA Updated by Philippe Antoine 1 day ago Actions
Copy link
 #4

  • Status changed from In Review to Assigned

https://github.com/OISF/suricata/pull/5929 got closed, reputing in assigned state

Actions
Copy link

Also available in: PDF Atom