Which set of actions would you take to create a simple custom detection?
A) Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains SHA-256 values.
B) Upload a packet capture; use a Snort rule; use a ClamAV rule.
C) Manually input the PE header data, the MD-5 hash, and a list of MD-5 hashes.
D) Input the file and file name.

Question

Quizplus · Accepted Answer

To create a simple custom detection, you can add a SHA-256 value, upload a file to calculate its SHA-256 value, or upload a text file containing SHA-256 values. These actions are directly related to identifying files based on their hash values.

Which Set of Actions Would You Take to Create a Simple