[Bro] Whitelist a file/hash

Matt Stucky mattchess50 at gmail.com
Thu Dec 12 06:41:20 PST 2013

What is the most appropriate way to whitelist a file/hash that keeps
getting flagged by the MHR notice?  Is there a "hash whitelist" or is a
notice hook that overrides the default action needed?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131212/638aef0c/attachment.html 

More information about the Bro mailing list