diff --git a/DeepWhite.md b/DeepWhite.md index bde4685..c264756 100644 --- a/DeepWhite.md +++ b/DeepWhite.md @@ -35,7 +35,7 @@ Note that hashdeep, etc., has a dumb recursive design (from the manpage): On Linux/Unix: take the raw CSV, remove the carriage returns, select DLLs, EXEs and SYS files, grab the 2nd field to the end, and create a new whitelist: ``` -cat raw-hashes.csv | tr -d '\r' | egrep "\.dll$|\.exe$|\.sys" | cut -d, -f2- > file-whitelist.csv +cat raw-hashes.csv | tr -d '\r' | egrep "\.dll$|\.exe$|\.sys$" | cut -d, -f2- > file-whitelist.csv ``` Add this entry to the first line of the file (only sha256 and path are currently needed)