configuration values
Recurring config-key sha-256 values
0 config-key sha-256 values appear in two or more samples, or on two or more hosts that served them. Each links to its samples, hosts and rule files. Builders reuse default and stock values, so unrelated files can share one. A shared value is not evidence of a single operator.
TLP:CLEAR
The config-key sha-256 is a one-way hash of the secret key in the configuration, published for matching. The key itself is not published.
0 values
No value of this field recurs yet.
1 further value occurs in one sample on at most one host, and is on its sample’s page.