Converting a Safelist (Whitelist) File to the New (v5.0+) Format
If you have a safelist (whitelist) file that was created under AC-Hunter 4.0.0 or earlier (by selecting “Download Whitelist” from the Settings box) and wish to convert it to the new format needed for version 5.0.1 or above, please do the following:
# Please note that you must put your safelist (whitelist) file in /opt/zeek/remotelogs/
cp -p path_to_your_old_whitelist_file.json /opt/zeek/remotelogs/old-whitelist.json cd /opt/zeek/remotelogs/ hunt run --rm -u 0 api /home/api/middleware upgrade-whitelist /opt/zeek/remotelogs/old-whitelist.json /opt/zeek/remotelogs/new-whitelist.json
You can now copy /opt/zeek/remotelogs/new-whitelist.json to where you keep your whitelist backups. You can also import this new safelist (whitelist) into AC-Hunter version 5.0.1 and above. (Note, if you’re running 5.0.0, please upgrade to 5.0.1).
Direct Link to this FAQ Item: https://portal.activecountermeasures.com/support/faq/?Display_FAQ=3229
Category:
AC-Hunter General