From 2b571d2af3b61b5ab6d12d420fb9e4da38efa2f8 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Fri, 24 May 2019 10:13:53 +0200
Subject: [PATCH] chg: [empty-hashes] empty ssdeep hashes added

---
 lists/empty-hashes/list.json | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/lists/empty-hashes/list.json b/lists/empty-hashes/list.json
index ba9a927..6a4d81f 100644
--- a/lists/empty-hashes/list.json
+++ b/lists/empty-hashes/list.json
@@ -1,6 +1,6 @@
 {
   "name": "List of known hashes for empty files",
-  "version": 2,
+  "version": 3,
   "description": "Event contains one or more entries of empty files based on known hashed",
   "matching_attributes": [
     "md5",
@@ -12,7 +12,9 @@
     "filename|sha1",
     "filename|sha224",
     "filename|sha256",
-    "filename|sha512"
+    "filename|sha512",
+    "ssdeep",
+    "filename|ssdeep"
   ],
   "type": "string",
   "list": [
@@ -20,6 +22,7 @@
     "da39a3ee5e6b4b0d3255bfef95601890afd80709",
     "d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f",
     "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-    "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e"
+    "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e",
+    "3::"
   ]
 }