[Bro-Dev] [JIRA] (BIT-1113) topic/jazoff/notice_file_info

Justin Azoff (JIRA) jira at bro-tracker.atlassian.net
Wed Jan 15 13:15:25 PST 2014


    [ https://bro-tracker.atlassian.net/browse/BIT-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15201#comment-15201 ] 

Justin Azoff commented on BIT-1113:
-----------------------------------

This branch contains a single change that adds the new file information to notice emails.  The resulting notices look like the following:

{code}
Message: Malware Hash Registry Detection rate: 11%  Last seen: 2014-01-07 12:38:05
Sub-message: https://www.virustotal.com/en/search/?query=c2937b7e2619af42c1cfa13e061c6a0f9133b2bb

File Description: http://staticwajam-wajam.netdna-ssl.com/static/update/wajam_update.exe?v0.016
File Mime Type: application/x-dosexec

Connection: ...
Connection uid: ...
...
{code}

> topic/jazoff/notice_file_info
> -----------------------------
>
>                 Key: BIT-1113
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1113
>             Project: Bro Issue Tracker
>          Issue Type: Patch
>          Components: Bro
>    Affects Versions: 2.2
>            Reporter: Justin Azoff
>




--
This message was sent by Atlassian JIRA
(v6.2-OD-07-027#6211)


More information about the bro-dev mailing list