Run JQ on empty-hashes
parent
ddddaba80d
commit
758ceda872
|
@ -3,14 +3,14 @@
|
||||||
"version": 1,
|
"version": 1,
|
||||||
"description": "Event contains one or more entries of empty files based on known hashed",
|
"description": "Event contains one or more entries of empty files based on known hashed",
|
||||||
"matching_attributes": [
|
"matching_attributes": [
|
||||||
"md5",
|
"md5",
|
||||||
"sha1",
|
"sha1",
|
||||||
"sha256",
|
"sha256",
|
||||||
"sha512",
|
"sha512",
|
||||||
"filename|md5",
|
"filename|md5",
|
||||||
"filename|sha1",
|
"filename|sha1",
|
||||||
"filename|sha256",
|
"filename|sha256",
|
||||||
"filename|sha512"
|
"filename|sha512"
|
||||||
],
|
],
|
||||||
"list": [
|
"list": [
|
||||||
"d41d8cd98f00b204e9800998ecf8427e",
|
"d41d8cd98f00b204e9800998ecf8427e",
|
||||||
|
|
Loading…
Reference in New Issue