[Intelmq-dev] IntelMQ Data Harmonization (DHO) - malware.hash key (issue 732)

Dustin Demuth dustin.demuth at intevation.de
Thu Jan 5 10:30:21 CET 2017


Hi,

Am Montag 02 Januar 2017 14:43:56 schrieb Pavel Kácha:

>    my few cents - in Idea we adopted URN syntax (as hash is basically
> content based resource identifier, so the hash name can denote the
> namespace).  Which happens to be the same, just with the colon separator:
>
>    sha256:79e18f...
>

IMHO this syntax is a good idea. Thank you Pavel.

Tomás: Do you need more input?

Ideas so far:

* An additional field for sha256
* A convention to store the hash in ".other" like "sha256:79e18..."



BR
Dustin

-- 
dustin.demuth at intevation.de  https://intevation.de/   OpenPGP key: B40D2EFF
Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998
Geschäftsführer:   Frank Koormann,  Bernhard Reiter,  Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20170105/efc64632/attachment.sig>


More information about the Intelmq-dev mailing list