About
Pricing
Community
Teams
Start Free Trial
Log in
sunhux
asked on
3/12/2017
How to mitigate against SHA256 hashes if our devices can't support it
Understand EPO & NIDS can't add SHA256 hashes but we wud still want to mitigate against them.
how can we go about doing this? So far our EPO could block/prevent creation of certain file
extensions
Vulnerabilities
Anti-Virus Apps
Network Security
8
3
Last Comment
btan
8/22/2022 - Mon
sunhux
3/12/2017
ASKER
The devices that lack this SHA256 hashes support I'm referring to
are McAfee EPO & IPS
sunhux
3/12/2017
ASKER
Sample SHA256 hashes to mitigate against :
• 899ff9489dde2c5f49d6835625
353bfe5ea8
ca3195ca01
362987a9d4
bdac162d
• 91ad7df7cae1c897e309f2cc1a
5fad99c274
a10e2d1ed2
ea7321c725
90bb35a7
EPO & IPS only support MD5 hashes
sunhux
3/13/2017
ASKER
Is there any way to translate/convert the SHA256 hashes to say a file name etc so that we can block the filenames instead?
Your help has saved me hundreds of hours of internet surfing.
fblack61
SOLUTION
btan
3/13/2017
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
sunhux
3/13/2017
ASKER
Thanks very much: can check if the following 3 MD5 is equiv to the following 3 SHA256 hashes:
MD5:
• 02b5964f93bcd22c4f6cedd64c
3b3de3
• 05d3b1a957167d6122e280c959
631e89
• 0B8064C1796F0048DF910028E7
AC0191
SHA256:
• 0c5e0a81efc0ccc406e5e6eaa2
22a79b491f
4aa2938cf7
cc72d0d027
b53a9d99
• 1739bdd96b6ec3ad7ef5dbae90
ff60cd04aa
568ef0af26
6791ec6481
5fc7ab8c
• 21b098d721ea88bf237c08cdb5
c619aa4350
46d9143bd4
a2c4ec463d
cf275cbe
ASKER CERTIFIED SOLUTION
btan
3/13/2017
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
sunhux
3/13/2017
ASKER
Thanks, so can we use the virustotal site to convert the SHA256 values to
MD5 values & input the MD5 values into our EPO & IPS instead?
SOLUTION
btan
3/13/2017
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
are McAfee EPO & IPS