From 41ad5fa64c7922b3674c1b25d7c8d10f52a42e06 Mon Sep 17 00:00:00 2001 From: Mike Loss Date: Tue, 27 Jun 2023 13:29:23 +0800 Subject: [PATCH] Update KeepRemoteAccessConfByExtension.toml added file extension for RSA seed files --- .../RemoteAccess/KeepRemoteAccessConfByExtension.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/UserFiles/RemoteAccess/KeepRemoteAccessConfByExtension.toml b/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/UserFiles/RemoteAccess/KeepRemoteAccessConfByExtension.toml index 3c4f12d..29f279f 100644 --- a/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/UserFiles/RemoteAccess/KeepRemoteAccessConfByExtension.toml +++ b/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/UserFiles/RemoteAccess/KeepRemoteAccessConfByExtension.toml @@ -6,5 +6,5 @@ Description = "Files with these extensions are a little interesting." MatchLocation = "FileExtension" WordListType = "Exact" MatchLength = 0 -WordList = ["\\.rdg","\\.rtsz","\\.rtsx","\\.ovpn","\\.tvopt"] -Triage = "Yellow" \ No newline at end of file +WordList = ["\\.rdg","\\.rtsz","\\.rtsx","\\.ovpn","\\.tvopt","\\.sdtid"] +Triage = "Yellow"