Skip to content

Commit c3123c5

Browse files
committed
doc/userguide: add information about file.mimetype
Ticket: 7816
1 parent 365f118 commit c3123c5

1 file changed

Lines changed: 11 additions & 0 deletions

File tree

doc/userguide/rules/file-keywords.rst

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,17 @@ here: https://redmine.openinfosecfoundation.org/issues/437
127127

128128
``file.magic`` supports multiple buffer matching, see :doc:`multi-buffer-matching`.
129129

130+
file.mimetype
131+
-------------
132+
133+
Sticky buffer that matches on the MIME type guessed from the binary content of a file.
134+
135+
Example::
136+
137+
file.mimetype; content:"application/vnd.microsoft.portable-executable";
138+
139+
``file.mimetype`` supports multiple buffer matching, see :doc:`multi-buffer-matching`.
140+
130141
filestore
131142
---------
132143

0 commit comments

Comments
 (0)