When using the “File Search and Destroy” feature, which of the following search hash type is supported?
When using the “File Search and Destroy” feature, which of the following search hash type is supported?
SHA256 hash of the file is supported when using the 'File Search and Destroy' feature. SHA256 is a widely used cryptographic hash function that is suitable for file hashing due to its security properties and widespread adoption.
I agree with the link below
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Search-and-Destroy-Malicious-Files Search File section To search by hash, enter the file SHA256 value. When you search by hash, you can also search for deleted instances of this file on the endpoint.