Configure file analysis

File analysis enables you to specify files to be hashed with the SHA-256 hashing algorithm. File hashes that match a threat collection will generate a detection.

Prerequisites

You must meet these requirements to view and configure file analysis on your ExtraHop system.

Create a file filter

You can configure a file filter to specify which files are hashed on the system.

  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Click the System Settings icon and then click File Analysis.
  3. ...
Last modified 2024-04-02