Report Executables as unknown when scanning

post by marcst on May 4, 2021

Marc

When perform an IQ scan with the client we get the following for executables contained in the archive (this is an example)

[WARN] Could not open main_project-hothR0/tm1server-11.8.00600.6-winx64h-app-inst.tar.gz/bin/tm1crypt.exe as an archive. Will scan it as regular file.

We want the executable to be reported as unknown to process them (just like dll’s)

1.1k views