Rules

Rules

The Authenticode Linter uses rules to lint the binary. Each rule is independent from one another. Meaning that two rules may fail for the same reason, such as the binary not being signed in the first place.

A rule has a unique identifier called a Rule ID. The rule ID is used to identify a rule based on the output of the linter, or to suppress rules that should not be run. A rule ID is always a 5 digit number.

Rules

• 10000 - Primary SHA1
• 10001 - SHA2 Signed
• 10002 - No Weak File Digests
• 10003 - Timestamped Rule
• 10004 - Publisher Information Rule
• 10005 - Publisher Information URL HTTPS Rule