Just a quick question. I've push Extra.DAT for WannaCry then a new Extra.DAT comes for Emotet. My question is, in pushing Extra.DATs, will the files be accumulated on the endpoint side? or the new one will overwrite the previous one?.
I think the latter one.
The Extra DATs are ment to give q quick help just when an new thread is sighted so you can implement safety just in time.
The signatures will be added to the normal DATs later on so you will still be protected.
As i see there can only be one Extra-DAT in your repo.