[Oisf-users] Flash Decompression

Clark Kent ctyk3322 at gmail.com
Mon Jul 16 12:47:21 UTC 2018


I was trying out the new Flash decompression feature in beta. Decompressing
CWS and making signature on them seems to work fine. However, if I try to
signature on lzma content I am not having any luck.

Is there anything special that needs to be done to signature on lzma
compress Flash files? I do have swf decompression on for both types.

             enabled: yes
             type: both
             compress-depth: 0
             decompress-depth: 0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20180716/7c804939/attachment.html>

More information about the Oisf-users mailing list