Hello,

I was wondering if there are any limitations in the Linux agent with regard to the supported hash methods: will a SHA256 IOC work for Linux or do I have to use SHA1? 

I’m asking because I tried entering a SHA256 IOC and (at first glance) it does not work even after several hours. At the same time DeviceEvents and other tables only show SHA1 values for files so I wondered if SHA256 is ever calculated?

​Hello, I was wondering if there are any limitations in the Linux agent with regard to the supported hash methods: will a SHA256 IOC work for Linux or do I have to use SHA1?  I’m asking because I tried entering a SHA256 IOC and (at first glance) it does not work even after several hours. At the same time DeviceEvents and other tables only show SHA1 values for files so I wondered if SHA256 is ever calculated?  Read More

​