eve/file: add comment on unconditional sha256

pull/12080/head
Eric Leblond 4 months ago
parent fd323e6d98
commit 1e7720ce4f

@ -161,6 +161,8 @@ void EveFileInfo(JsonBuilder *jb, const File *ff, const uint64_t tx_id, const ui
break;
}
/* Log sha256 even if incomplete as it can be useful to correlate with
stored file */
if (ff->flags & FILE_SHA256) {
jb_set_hex(jb, "sha256", (uint8_t *)ff->sha256, (uint32_t)sizeof(ff->sha256));
}

Loading…
Cancel
Save