[Oisf-users] Flash Decompression

[Clark Kent]

Hello,

I was trying out the new Flash decompression feature in beta. Decompressing
CWS and making signature on them seems to work fine. However, if I try to
signature on lzma content I am not having any luck.

Is there anything special that needs to be done to signature on lzma
compress Flash files? I do have swf decompression on for both types.

           swf-decompression:
             enabled: yes
             type: both
             compress-depth: 0
             decompress-depth: 0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20180716/7c804939/attachment.html>