Re: "Bitdefender has provided a list of file hashes to block and indicators of compromise"
file hashes are much faster to scan for.
Also how does the virus change its size once deployed, does it recompile itself? Most virus's will stay the same size unless updated to a new version, a file hash is tiny and many hashes can be searched for quickly. Its far easier to look for a file hash than rip apart every file looking to understand how it works and determine if its a virus. Much quicker to do that once, calculate the hash for bad files and tell all your clients to look for the hash.
Have you built some new tool Mike 137 that does a better quicker job?
Biting the hand that feeds IT
