Few FP's about loki

[Neo23x0]

I put the hashes into falsepositive-hashes.txt

I'll add the following condition to the Cloaked_as_JPG rule:
and filetype != "GIF"

[ndrix]

Hi Florian, thank you for the update. It's great software! Well done!

Sent from my iPhone

On Dec 17, 2015, at 17:40, Florian Roth [email protected] wrote:

I put the hashes into falsepositive-hashes.txt

I'll add the following condition to the Cloaked_as_JPG rule:
and filetype != "GIF"

—
Reply to this email directly or view it on GitHub.

[Neo23x0]

Thanks,

could you check if these fixes solved the problem for you? (if you have the samples and not just the log data from a analysed system)

[ndrix]

Will check it at the customer site again on Sunday and let you know

Sent from my iPhone

On Dec 18, 2015, at 11:24, Florian Roth [email protected] wrote:

Thanks,

could you check if these fixes solved the problem for you? (if you have the samples and not just the log data from a analysed system)

—
Reply to this email directly or view it on GitHub.