Project

General

Profile

Actions

Feature #4279

open
JW JW

Optionally allow hashing truncated files, and a maximum length to hash

Feature #4279: Optionally allow hashing truncated files, and a maximum length to hash

Added by Jeff Weeks about 5 years ago. Updated 1 day ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

The hash of a truncated file is still valuable information, as is the hash of the first N bytes of a file.
Both of these can be optionally enabled via configuration.


Related issues 1 (1 open0 closed)

Related to Suricata - Feature #6161: file-store: missing hash on TRUNCATED filesFeedbackAndreas HerzActions
Actions

Also available in: PDF Atom