2 Replies Latest reply on Mar 13, 2013 8:20 PM by cscoup8

    Blocking objects based on a hex pattern

      Using the property Body.PositionOfPattern I'm able to block files based on a hex pattern.  Does this ability extend to files within archives (embedded objects) by any chance?  The latter does not seem to work for me.

       

      Also, how are the hex lists used in practice?  The way that I would have imaged it working would be that you could specify a series of hex patterns along with their corresponding offsets, however as far as I can tell this does not seem to be how it is structured.

        • 1. Re: Blocking objects based on a hex pattern
          fschulte

          I have not tried it, but it should be possible to specify a byte pattern by using hex values as input for Body.PositionOfPattern. So just try it (and tell me later if it worked for your use case ). If it works in general, then it will also work for embedded objects.

           

          Hex lists are lists of numbers given in hex notation. They will not help you with you task here. I looks that for each byte pattern you want to find, you need an extra rule. That approach seems not to scale well with a growing list of patterns, but as long as you only have a few, it should be fine.

          • 2. Re: Blocking objects based on a hex pattern

            The Body.PositionOfPattern works for both individual files and embedded objects. It was user error on my part. While experimenting with this functionality I inadvertantly made a change to the property which resulted in it no longer working the way it was supposed to.