mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
![]() There are two new script level functions to query and lookup files from the core by their IDs. These are adding feature parity for similarly named functions for files. The function prototypes are as follows: Files::file_exists(fuid: string): bool Files::lookup_File(fuid: string): fa_file |
||
---|---|---|
.. | ||
magic | ||
__load__.bro | ||
main.bro | ||
README |
The file analysis framework provides an interface for driving the analysis of files, possibly independent of any network protocol over which they're transported.