Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 13:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Update pe/main.bro to user register_for_mime_types, ensuring it will also work with the upcoming Files framework changes.

Browse source
This commit is contained in:
Vlad Grigorescu 2015-04-20 11:54:34 -04:00
parent 49d54b6a4e
commit 928f870f58
2 changed files with 15 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/base/files/pe/main.bro
View file

@ -69,8 +69,11 @@ redef record fa_file += {
pe: Info &optional;
};
const pe_mime_types = { "application/x-dosexec" };
event bro_init() &priority=5
{
Files::register_for_mime_types(Files::ANALYZER_PE, pe_mime_types);
Log::create_stream(LOG, [$columns=Info, $ev=log_pe]);
}
@ -148,10 +151,3 @@ event file_state_remove(f: fa_file) &priority=-5
Log::write(LOG, f$pe);
}
event file_mime_type(f: fa_file, mime_type: string)
{
if ( mime_type == /application\/x-dosexec.*/ )
{
Files::add_analyzer(f, Files::ANALYZER_PE);
}
}