CleanList

Description

If you add a file to this list, the system treats it as if the AMP cloud assigned a clean disposition. You can add multiple SHA-256 values to a Clean List file by uploading a comma-separated value (CSV) source file containing a list of SHA-256 values and descriptions. The Clean List file must be a simple text file with a .csv file name extension. Any header must start with a pound sign (#); it is treated as a comment and not uploaded. The system ignores any additional information in the entry.
Note the following:
1. Deleting a Clean List file from the file list also removes all associated SHA-256 hashes from the file list.
2. You cannot upload Clean List file if SHA-256 count is going to be more than 10000 SHA-256 values.
3. The system truncates descriptions exceeding 256 characters to the first 256 characters on upload. If the description contains commas, you must use an escape character (,).
4. If a Clean List file contains a SHA-256 value and you upload a Clean List file containing that value, the newly uploaded value does not modify the existing SHA-256 value. When viewing captured files, file events, or malware events related to the SHA-256 value, any threat name or description is derived from the individual SHA-256 value. You cannot directly edit a Clean List file. To make changes, you must first modify your Clean List file directly, delete the copy on the system, then upload the modified Clean List file. The number of entries associated with a Clean List file refers to the total number of SHA-256 values. If you delete a Clean List file from a Clean List file list, the total number of SHA-256 entries the file list contains decreases by the number of entries in the Clean List file (Note: The field level constraints listed here might not cover all the constraints on the field. Additional constraints might exist.)

Model Properties

Property	Required	Type	Description
version	False	string	A unique string version assigned by the system when the object is created or modified. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete an existing object. As the version will change every time the object is modified, the value provided in this identifier must match exactly what is present in the system or the request will be rejected.
name	False	string	Name of the file containing list of SHAs of clean files.
cleanListHashCount	False	integer	An integer count of SHAs present in the Clean List file. Field level constraints: must be between 0 and 10000 (inclusive). (Note: Additional constraints might exist)
id	False	string	A unique string identifier assigned by the system when the object is created. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete (or reference) an existing object. Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist)
type	True	string	A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name.