Run JQ on empty-hashes

pull/27/head
Raphaël Vinot 2017-02-17 09:56:06 +01:00
parent ddddaba80d
commit 758ceda872
1 changed files with 8 additions and 8 deletions

View File

@ -3,14 +3,14 @@
"version": 1,
"description": "Event contains one or more entries of empty files based on known hashed",
"matching_attributes": [
"md5",
"sha1",
"sha256",
"sha512",
"filename|md5",
"filename|sha1",
"filename|sha256",
"filename|sha512"
"md5",
"sha1",
"sha256",
"sha512",
"filename|md5",
"filename|sha1",
"filename|sha256",
"filename|sha512"
],
"list": [
"d41d8cd98f00b204e9800998ecf8427e",