Hello Guys,
I have already deployed Symantecav parser in my decoder, But however hash file(SHA 256,SHA 1 ,MD5) are not yet parsed in pre-defined parser.
In symantecav parser I could see that sha256,sha1& MD5 are mapped as dummy variable, May I Know why sha files mapped as dummy variable.
If I have write a parser mapping manually ,it will affect my efficiency or else cpu utilization of decoder.
Kindly help suggest me on the same.
Thanks&Regards,
Suresh K
Based on the sample logs i had, i can see that hash values are parsed in "checksum" meta.
Can you share the sample log by exporting from GUI and we can check this further?
Regards
Ankush