Is it Possible to Create Custom Signatures Based on a File Hash?
24920
Created On 04/04/19 04:42 AM - Last Modified 07/31/25 21:12 PM
Question
Is it possible to create custom signature based on a File Hash?
Answer
It’s not possible to create a custom signature in Palo Alto Networks based on hash value. To generate a file hash, the complete file needs to be cached, which is not efficient in parallel processing.
Additional Information
There are options to create custom signatures based on patterns for certain file types.
Please review the below documents for more information:
Detecting a specific Linux binary(ELF) file using a custom signature