Add matching_attributes

pull/21/head
devnull- 2017-02-16 22:13:56 +01:00
parent 4d186724d1
commit 931ff12935
1 changed files with 10 additions and 1 deletions

View File

@ -2,7 +2,16 @@
"name": "List of known hashes for empty files",
"version": 1,
"description": "Event contains one or more entries of empty files based on known hashed",
"matching_attributes": [],
"matching_attributes": [
"md5",
"sha1",
"sha256",
"sha512",
"filename|md5",
"filename|sha1",
"filename|sha256",
"filename|sha512"
],
"list": [
"d41d8cd98f00b204e9800998ecf8427e",
"da39a3ee5e6b4b0d3255bfef95601890afd80709",