Services Config View - Hash Tab

This topic introduces the features and functions available in the Service Config view > Hash tab for Malware Analysis.

In this tab, you can manage hash filtering in Malware Analysis. The hash grid is initially empty; the grid lists filters that have been added to Malware Analysis. In this view, you can add a hash filter, delete a hash filter, mark a hash filter as trusted or untrusted, and save changes.

Workflow

netwitness_113_malware_configworkflow_step2.png

What do you want to do?

Role I Want to... Show me how
Administrator Configure General Malware Analysis Settings Configure General Malware Analysis Settings
Administrator Configure Indicators of Compromise Configure Indicators of Compromise

Administrator

Configure Auditing on Malware Analysis Host

(Optional) Configure Auditing on Malware Analysis Host

Administrator Configure Hash Filter* (Optional) Configure Hash Filter

Administrator

Configure Installed Anti virus Vendor

Configure Installed Antivirus Vendors

Administrator Configure Malware Analysis Proxy Settings (Optional) Configure Malware Analysis Proxy Settings

Administrator

Register a TreadGRID API Key

(Optional) Register for a ThreatGRID API Key

Administrator Enable Community Analysis Enable Community Analysis

*You can perform this task in the current view

Related Topic

Basic Setup

Quick Look

This is an example of the Hash tab.

netwitness_hashtab.png

1 Displays the Hash Tab.

This is an example of the Add Hash dialog.

netwitness_addhashdg_331x145.png

Features

The Hash tab consists of a toolbar and a pageable hash grid.

This table describes the Hash tab toolbar.

Feature Description
MD5 Search Enter an MD5 hash for which you want to search the results in the grid. The search function is case-insensitive.
Add Displays the Add Hash dialog in which you can add a new hash to the hash grid, specify whether the hash is trusted or not, and provide the hash file size.
Save Edit Saves any additions or edits to hashes in the grid.
Delete Deletes selected hashes from the grid.

This table describes the Hash grid columns.

Feature Description
Select Checkbox Click to select a row. Click in the column header to select a header.
Trusted Marks a hash as trusted or untrusted.
MD5 Identifies the MD5 hash.
File Size Identifies the hash file size in kilobytes.