[Bro] Whitelist a file/hash

[Matt Stucky]

What is the most appropriate way to whitelist a file/hash that keeps
getting flagged by the MHR notice?  Is there a "hash whitelist" or is a
notice hook that overrides the default action needed?

Thanks,
-matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131212/638aef0c/attachment.html