29 lines
811 B
JSON
29 lines
811 B
JSON
{
|
|
"name": "List of known hashes for empty files",
|
|
"version": 3,
|
|
"description": "Event contains one or more entries of empty files based on known hashed",
|
|
"matching_attributes": [
|
|
"md5",
|
|
"sha1",
|
|
"sha224",
|
|
"sha256",
|
|
"sha512",
|
|
"filename|md5",
|
|
"filename|sha1",
|
|
"filename|sha224",
|
|
"filename|sha256",
|
|
"filename|sha512",
|
|
"ssdeep",
|
|
"filename|ssdeep"
|
|
],
|
|
"type": "string",
|
|
"list": [
|
|
"d41d8cd98f00b204e9800998ecf8427e",
|
|
"da39a3ee5e6b4b0d3255bfef95601890afd80709",
|
|
"d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f",
|
|
"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
|
"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e",
|
|
"3::"
|
|
]
|
|
}
|