Project

General

Profile

Actions
Copy link

Feature #7654

open
EL OD

detect: rule keywords for matching on file hashes

Feature #7654: detect: rule keywords for matching on file hashes

Added by Eric Leblond about 1 year ago. Updated 9 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Matching on a list of files hash is convenient but it requires to ship multiple files which is not convenient in automated exports.

We can not match with the existing transforms. This means we need the following keywords:
  • file.md5
  • file.sha1
  • file.sha256
Actions
Copy link

Also available in: PDF Atom