FILE_MACHO_SYMHASH

elastic_common_schema::ecs::file

Constant FILE_MACHO_SYMHASH 

Source 
pub const FILE_MACHO_SYMHASH: &str = "file.macho.symhash";
Expand description

A hash of the imports in a Mach-O file. An import hash can be used to fingerprint binaries even after recompilation or other code-level transformations have occurred, which would change more traditional hash values. This is a Mach-O implementation of the Windows PE imphash

ยงExamples

  • d3ccf195b62a9279c3c19af1080497ec