Hash "whitelist"

[import-pandas-as-numpy]

We can't bake these all in our yara rules. This may be a very large project, but a database of known good hashes (such as stdlib files) could be checked prior to scanning individual files to exempt certain files that match known good hashes.

[jonathan-d-zhang]

First thoughts, how would this database be created? These could probably be distributed from mainframe, updated in the client through a similar mechanism to the rules.