No globs/regex/osmatch do not work with cdb and never will. This is how the database works. You can only ask it simple questions like the following:
Does cdb file x.cdb have key: Jeremy Does cdb file x.cdb not have key: Rossi This is due to how cdb hash the keys and in a constant time look up if key is present. > On Jan 21, 2015, at 7:38 AM, dan (ddp) <[email protected]> wrote: > >> On Wed, Jan 21, 2015 at 6:45 AM, alex petrov <[email protected]> wrote: >> Hello. Is it possible to enter values in the list to specify the key >> \Documents and Settings\* (anything)\Local Settings\Temp\* >> (anything)\test.exe >> >> >> Exaple list.cdb >> >> >> >> \Documents and Settings\* (anything)\Local Settings\Temp\* >> (anything)\test.exe: good > > I don't think so, but I haven't tried it. Give it a shot and report back! :-) > >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
