zeek/scripts/base/frameworks/files/magic
Seth Hall ee3e885712 Lots of fixes for file type identification.
- Plain text now identified with BOMs for UTF8,16,32
   (even though 16 and 32 wouldn't get identified as plain text, oh-well)
 - X.509 certificates are now populating files.log with
   the mime type application/pkix-cert.
 - File signatures are split apart into file types
   to help group and organize signatures a bit better.
 - Normalized some FILE_ANALYSIS debug messages.
 - Improved Javascript detection.
 - Improved HTML detection.
 - Removed a bunch of bad signatures.
 - Merged a bunch of signatures that ultimately detected
   the same mime type.
 - Added detection for MS LNK files.
 - Added detection for cross-domain-policy XML files.
 - Added detection for SOAP envelopes.
2015-03-13 22:14:44 -04:00
..
__load__.bro Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
archive.sig Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
general.sig Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
image.sig Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
libmagic.sig Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
msoffice.sig Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
video.sig Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00