topic Re: Create threat signature in General Topics

Create threat signature

MohamedSharief — Tue, 31 Jan 2017 13:35:16 GMT

Hi Guys,

I need to know if I can create a threat signature in case I've only the malware hash.

Is it possible to do on PA?

If not, Is there any other way I can block malwares based on hashes only?

Regards,

Sharief

Re: Create threat signature

sullivanpj2 — Tue, 31 Jan 2017 13:46:39 GMT

I believe you can make custom vulnerability signatures but I don't think that allows the use of hashes just because they change to often to be reliable.

https://live.paloaltonetworks.com/t5/Tech-Note-Articles/Creating-Custom-Threat-Signatures/ta-p/58569

- Peter

Re: Create threat signature

MohamedSharief — Wed, 01 Feb 2017 13:48:02 GMT

That's correct Peter! you can't. Just tried that in my lab.

Regards,

Sharief