Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

signatures/iso-9660: Add \x01 suffix to CD001

Browse source 
As discussed with Tim, that should make it a bit more robust against
false positives.
This commit is contained in:
Arne Welzel 2024-02-26 20:59:01 +01:00
parent e11c20e1eb
commit f4ed1e05fc
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/frameworks/signatures/iso-9660.sig
View file

@ -6,5 +6,5 @@
# results in major performance degradation.
signature file-iso9660 {
file-mime "application/x-iso9660-image", 99
file-magic /.*CD001/
file-magic /.*CD001\x01/
}