Comprehensive data protection for all workloads
galbitz
Enthusiast
Posts: 42
Liked: 5 times
Joined: May 17, 2018 2:22 pm
Full Name: grant albitz
Contact:

Veeam 12.1 & Suspicious files

Post by galbitz »

Hi,

I have enabled this feature and it flagged a few visual studio projects. I can somewhat understand its concern with the projects. Is there a way to tell veeam to ignore these files moving forward? I see there is a global malware exclusion setting but that appears to whitelist an entire server.
davemann
Influencer
Posts: 11
Liked: 4 times
Joined: Jul 15, 2016 8:40 pm
Full Name: Dave Reichert
Contact:

Re: veeam 12.1 suspicious files

Post by davemann » 2 people like this post

I find that this feature is lacking in completeness.

Firstly, there's no easy way to get a complete list of all files/pathnames for all suspicious files, secondly - when you mark a backup as clean, it just comes back as suspicious again.

What should really be done is that the files detected as suspicious should be marked clean for that particular backup file/job until additional suspicious files are detected.

I end up having to go into Enterprise Manager just to find out where these files are, rather than just being able to export a CSV from the VBR console.
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev » 4 people like this post

We're here and listening to make it complete based on the feedback from actual users like yourself! So thanks for sharing your experience with v1 of this functionality, it helps us prioritize the following enhancements.
Dima P.
Product Manager
Posts: 14417
Liked: 1576 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: veeam 12.1 suspicious files

Post by Dima P. » 1 person likes this post

Hello and thank you for your feedback!
it flagged a few visual studio projects
Can you please share the details of the malware event from the Veeam B&R console? Thank you in advance!
jeffshead
Enthusiast
Posts: 71
Liked: 3 times
Joined: May 05, 2016 1:07 pm
Full Name: Jeff
Contact:

Re: veeam 12.1 suspicious files

Post by jeffshead »

Same here. I just installed 12.1 and turned on Malware protection and I got a lot of false-positives. I haven't found a way to exclude individual files from detection, only file extensions and machines.

I LOVE Veeam and for many years it's been my top choice when recommending a backup solution but I don't see the value in this current implementation of Malware Protection. It just feels like a beta or even worse, a marketing gimmick at this stage (no disrespect intended). It's reminiscent of car alarms -- So many false-alarms that no one pays attention anymore and it just becomes a nuisance.

Because of the 60,000 character posting limit in this forum, I'll post the file names in a second post.
jeffshead
Enthusiast
Posts: 71
Liked: 3 times
Joined: May 05, 2016 1:07 pm
Full Name: Jeff
Contact:

Re: veeam 12.1 suspicious files

Post by jeffshead »

Code: Select all

C:\Users\<>\AppData\Roaming\GPSoftware\Directory Opus\FileTypes:Drive.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusUnknown.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:lnkfile.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusCollectionItem.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusZip.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusTextHandler.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusPictureHandler.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:AllFilesystemObjects.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:Directory.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:AllFiles.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:CompressedFolder.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes\Groups:groups.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Applications.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Drives.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Office.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Office365.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:OpenOffice.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Menu.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Operations.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:File Display.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Images.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Image Viewer.dop
C:\ProgramData\GPSoftware\Directory Opus\Buttons:Office365.dop
.. \Directory Opus\Buttons:OpenOffice.dop
.. \Directory Opus\Buttons:Office.dop
.. \Directory Opus\Buttons:Drives.dop
.. \Directory Opus\Buttons:Applications.dop
C:\Program Files\TechSmith\Snagit 2022:English.afd
.. \Snagit 2022:French.afd
.. \Snagit 2022:German.afd
.. \Snagit 2022:Spanish.afd
C:\Program Files\7-Zip\Lang:en.ttt
C:\Misc\PortableApps\Total Commander Extended\Plugins\wcx\Total7zip\64\Lang:en.ttt
/var/lib/docker/overlay2/<>/diff/opt/outline/node_modules/crypto-js/docs:QuickStartGuide.wiki
.. /diff/tmp/openresty/bundle/ngx_lua-0.10.25/doc:HttpLuaModule.wiki
.. /diff/tmp/openresty/build/ngx_lua-0.10.25/doc:HttpLuaModule.wiki
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.4.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.5.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.6.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.7.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:CastSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ControlStructureSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ControlStructureSpacingUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionClosingBraceSpaceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionClosingBraceSpaceUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionOpeningBraceSpaceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionOpeningBraceSpaceUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.5.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.6.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:LanguageConstructSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:LogicalOperatorSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:LogicalOperatorSpacingUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:MemberVarSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ObjectOperatorSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:OperatorSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:OperatorSpacingUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:PropertyLabelSpacingUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ScopeClosingBraceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ScopeKeywordSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SemicolonSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SemicolonSpacingUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.1.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.1.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.2.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.2.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.3.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.3.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.4.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.5.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Strings:ConcatenationSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Strings:DoubleQuoteUsageUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Strings:EchoedStringsUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/PHP:EmbeddedPhpUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/PHP:LowercasePHPFunctionsUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Objects:ObjectMemberCommaUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:FunctionDeclarationArgumentSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:LowercaseFunctionKeywordsUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:MultiLineFunctionDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:MultiLineFunctionDeclarationUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Formatting:OperatorBracketUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Formatting:OperatorBracketUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ControlSignatureUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ControlSignatureUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ElseIfDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ForEachLoopDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ForLoopDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ForLoopDeclarationUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:InlineIfDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:LowercaseDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:SwitchDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:BlockCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:DocCommentAlignmentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:DocCommentAlignmentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:FileCommentUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:FileCommentUnitTest.1.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:FunctionCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:InlineCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:InlineCommentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:LongConditionClosingCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:LongConditionClosingCommentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:PostStatementCommentUnitTest.1.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:PostStatementCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:VariableCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Classes:ClassDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Classes:LowercaseClassKeywordsUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Classes:SelfMemberReferenceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ClassDefinitionClosingBraceSpaceUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ClassDefinitionOpeningBraceSpaceUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ColonSpacingUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ColourDefinitionUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:DisallowMultipleStyleDefinitionsUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ForbiddenStylesUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:IndentationUnitTest.1.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:OpacityUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:SemicolonSpacingUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ShorthandSizeUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Arrays:ArrayBracketSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Arrays:ArrayDeclarationUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Arrays:ArrayDeclarationUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:NamespaceDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.10.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.11.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.12.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.13.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.14.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.16.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.5.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Methods:FunctionCallSignatureUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Methods:FunctionClosingBraceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Methods:MethodDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.4.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.5.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.6.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.7.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.10.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.11.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.12.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.13.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.6.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.7.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.9.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/ControlStructures:ControlStructureSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/ControlStructures:ElseIfDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/ControlStructures:SwitchDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Classes:ClassDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Classes:PropertyDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Traits:UseDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Operators:OperatorSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Keywords:ShortFormTypeKeywordsUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Functions:NullableTypeDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Functions:ReturnTypeDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:DeclareStatementUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.10.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.11.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.12.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.4.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.7.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:ImportStatementUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:OpenTagUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/ControlStructures:BooleanOperatorPlacementUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/ControlStructures:ControlStructureSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Classes:AnonClassDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Classes:ClassInstantiationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Classes:OpeningBraceSpaceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/WhiteSpace:ObjectOperatorIndentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/WhiteSpace:ScopeClosingBraceUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionCallSignatureUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionCallSignatureUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionDeclarationUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionDeclarationUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Files:IncludingFileUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/ControlStructures:MultiLineConditionUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/ControlStructures:MultiLineConditionUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Commenting:FunctionCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Commenting:InlineCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Classes:ClassDeclarationUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ArbitraryParenthesesSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:IncrementDecrementSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:IncrementDecrementSpacingUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:LanguageConstructSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.1.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:SpreadOperatorSpacingAfterUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowAlternativePHPTagsUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowAlternativePHPTagsUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowShortOpenTagUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowShortOpenTagUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseConstantUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseConstantUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseKeywordUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseTypeUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:UpperCaseConstantUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Functions:FunctionCallArgumentSpacingUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Functions:OpeningFunctionBraceBsdAllmanUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Functions:OpeningFunctionBraceKernighanRitchieUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:DisallowMultipleStatementsUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:MultipleStatementAlignmentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:MultipleStatementAlignmentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:NoSpaceAfterCastUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceAfterCastUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceAfterNotUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceAfterNotUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceBeforeCastUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.3.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.3.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.3.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.4.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.6.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.7.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.1.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.1.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.2.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.2.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.6.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.8.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.9.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.css.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/ControlStructures:InlineControlStructureUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/ControlStructures:InlineControlStructureUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Commenting:DocCommentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Commenting:DocCommentUnitTest.js.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/CodeAnalysis:EmptyPHPStatementUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Classes:OpeningBraceSameLineUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:ArrayIndentUnitTest.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:DisallowLongArraySyntaxUnitTest.1.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:DisallowLongArraySyntaxUnitTest.2.inc.fixed
.. /merged/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:DisallowShortArraySyntaxUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.4.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.5.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.6.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Zend/Tests/Files:ClosingTagUnitTest.7.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:CastSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ControlStructureSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ControlStructureSpacingUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionClosingBraceSpaceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionClosingBraceSpaceUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionOpeningBraceSpaceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionOpeningBraceSpaceUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.5.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:FunctionSpacingUnitTest.6.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:LanguageConstructSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:LogicalOperatorSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:LogicalOperatorSpacingUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:MemberVarSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ObjectOperatorSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:OperatorSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:OperatorSpacingUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:PropertyLabelSpacingUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ScopeClosingBraceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:ScopeKeywordSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SemicolonSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SemicolonSpacingUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.1.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.1.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.2.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.2.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.3.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.3.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.4.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/WhiteSpace:SuperfluousWhitespaceUnitTest.5.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Strings:ConcatenationSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Strings:DoubleQuoteUsageUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Strings:EchoedStringsUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/PHP:EmbeddedPhpUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/PHP:LowercasePHPFunctionsUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Objects:ObjectMemberCommaUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:FunctionDeclarationArgumentSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:LowercaseFunctionKeywordsUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:MultiLineFunctionDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Functions:MultiLineFunctionDeclarationUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Formatting:OperatorBracketUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Formatting:OperatorBracketUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ControlSignatureUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ControlSignatureUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ElseIfDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ForEachLoopDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ForLoopDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:ForLoopDeclarationUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:InlineIfDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:LowercaseDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/ControlStructures:SwitchDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:BlockCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:DocCommentAlignmentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:DocCommentAlignmentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:FileCommentUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:FileCommentUnitTest.1.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:FunctionCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:InlineCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:InlineCommentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:LongConditionClosingCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:LongConditionClosingCommentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:PostStatementCommentUnitTest.1.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:PostStatementCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Commenting:VariableCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Classes:ClassDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Classes:LowercaseClassKeywordsUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Classes:SelfMemberReferenceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ClassDefinitionClosingBraceSpaceUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ClassDefinitionOpeningBraceSpaceUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ColonSpacingUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ColourDefinitionUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:DisallowMultipleStyleDefinitionsUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ForbiddenStylesUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:IndentationUnitTest.1.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:OpacityUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:SemicolonSpacingUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/CSS:ShorthandSizeUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Arrays:ArrayBracketSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Arrays:ArrayDeclarationUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Squiz/Tests/Arrays:ArrayDeclarationUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:NamespaceDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.10.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.11.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.12.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.13.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.14.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.16.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Namespaces:UseDeclarationUnitTest.5.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Methods:FunctionCallSignatureUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Methods:FunctionClosingBraceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Methods:MethodDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.4.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.5.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.6.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:ClosingTagUnitTest.7.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.10.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.11.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.12.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.13.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.6.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.7.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Files:EndFileNewlineUnitTest.9.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/ControlStructures:ControlStructureSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/ControlStructures:ElseIfDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/ControlStructures:SwitchDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Classes:ClassDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR2/Tests/Classes:PropertyDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Traits:UseDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Operators:OperatorSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Keywords:ShortFormTypeKeywordsUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Functions:NullableTypeDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Functions:ReturnTypeDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:DeclareStatementUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.10.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.11.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.12.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.4.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:FileHeaderUnitTest.7.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:ImportStatementUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Files:OpenTagUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/ControlStructures:BooleanOperatorPlacementUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/ControlStructures:ControlStructureSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Classes:AnonClassDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Classes:ClassInstantiationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PSR12/Tests/Classes:OpeningBraceSpaceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/WhiteSpace:ObjectOperatorIndentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/WhiteSpace:ScopeClosingBraceUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionCallSignatureUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionCallSignatureUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionDeclarationUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Functions:FunctionDeclarationUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Files:IncludingFileUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/ControlStructures:MultiLineConditionUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/ControlStructures:MultiLineConditionUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Commenting:FunctionCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Commenting:InlineCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/PEAR/Tests/Classes:ClassDeclarationUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ArbitraryParenthesesSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowSpaceIndentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:DisallowTabIndentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:IncrementDecrementSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:IncrementDecrementSpacingUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:LanguageConstructSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.1.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:ScopeIndentUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/WhiteSpace:SpreadOperatorSpacingAfterUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowAlternativePHPTagsUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowAlternativePHPTagsUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowShortOpenTagUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:DisallowShortOpenTagUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseConstantUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseConstantUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseKeywordUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:LowerCaseTypeUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/PHP:UpperCaseConstantUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Functions:FunctionCallArgumentSpacingUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Functions:OpeningFunctionBraceBsdAllmanUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Functions:OpeningFunctionBraceKernighanRitchieUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:DisallowMultipleStatementsUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:MultipleStatementAlignmentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:MultipleStatementAlignmentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:NoSpaceAfterCastUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceAfterCastUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceAfterNotUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceAfterNotUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Formatting:SpaceBeforeCastUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.3.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.3.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.3.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.4.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.6.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNewlineUnitTest.7.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.1.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.1.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.2.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.2.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.6.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.8.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:EndFileNoNewlineUnitTest.9.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.css.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Files:LineEndingsUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/ControlStructures:InlineControlStructureUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/ControlStructures:InlineControlStructureUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Commenting:DocCommentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Commenting:DocCommentUnitTest.js.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/CodeAnalysis:EmptyPHPStatementUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Classes:OpeningBraceSameLineUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:ArrayIndentUnitTest.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:DisallowLongArraySyntaxUnitTest.1.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:DisallowLongArraySyntaxUnitTest.2.inc.fixed
.. /diff/app/www/vendor/squizlabs/php_codesniffer/src/Standards/Generic/Tests/Arrays:DisallowShortArraySyntaxUnitTest.inc.fixed
C:\Users\<>\AppData\Roaming\GPSoftware\Directory Opus\FileTypes:Drive.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusUnknown.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:lnkfile.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusCollectionItem.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusZip.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusTextHandler.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:OpusPictureHandler.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:AllFilesystemObjects.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:Directory.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:AllFiles.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes:CompressedFolder.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\FileTypes\Groups:groups.oxr
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Applications.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Drives.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Office.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Office365.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:OpenOffice.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Menu.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Operations.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:File Display.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Images.dop
.. \AppData\Roaming\GPSoftware\Directory Opus\Buttons:Image Viewer.dop
C:\ProgramData\GPSoftware\Directory Opus\Buttons:Office365.dop
.. \Directory Opus\Buttons:OpenOffice.dop
.. \Directory Opus\Buttons:Office.dop
.. \Directory Opus\Buttons:Drives.dop
.. \Directory Opus\Buttons:Applications.dop
C:\Program Files\TechSmith\Snagit 2022:English.afd
.. \Snagit 2022:French.afd
.. \Snagit 2022:German.afd
.. \Snagit 2022:Spanish.afd
C:\Program Files\7-Zip\Lang:en.ttt
C:\Misc\PortableApps\Total Commander Extended\Plugins\wcx\Total7zip\64\Lang:en.ttt

Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev » 1 person likes this post

Well, that a really strange way to think about this result.

First, the files you posted all carry known ransomware extensions and they were detected properly by Veeam, so how is this a gimmick?

Further, I counted only 5-6 unique extensions in total and you can exclude them from the monitoring in just a few clicks, if they are valid files for your business. So instead of disabling our malware detection completely, in just a few seconds you could have our engine tuned perfectly for the specific, unique workload of your business and have it guarding your environment from over a thousand of other ransomware strains while producing zero false positives.

The only drawback of adding these few extensions to exclusions is that the attacks with malware strains using these extensions will not be detected on the basis of file system activity any longer, however the impacted files may still be detected by the inline entropy analysis.
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev » 2 people like this post

Having said that, this just gave me an idea: what if we automatically added to exclusions all known ransomware extensions detected during backups in the first 24 hours following the Veeam installation? This means assuming we're dealing with a clean environment at least originally, which is almost always the case anyhow. What do you think? This will save users some time plus cleaning the excludes list is always easier than populating one ;)
jeffshead
Enthusiast
Posts: 71
Liked: 3 times
Joined: May 05, 2016 1:07 pm
Full Name: Jeff
Contact:

Re: veeam 12.1 suspicious files

Post by jeffshead »

Thanks for the response.
so how is this a gimmick?
I don't think it is a gimmick. I should have chosen my words more carefully. The point that I was attempting to make is that users become desensitized by repeated false-positive alerts. Maybe it's not doable but a more granular, specific file, path or regex exclusion approach seems more robust than file extension exclusion.
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev » 2 people like this post

Easily doable, the only concern would be this being much more CPU intensive and thus much slower than simple extension search. I've asked devs to compare CPU load when they get a chance.
Dima P.
Product Manager
Posts: 14417
Liked: 1576 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: veeam 12.1 suspicious files

Post by Dima P. » 1 person likes this post

Thank you for the feedback Jeff and additional thanks for the list of your false-positives, we will review it with the team.

Any specific regular expressions that might come handy for your environment? Regarding customization, today you can add to include / exclude filters for indexing scan (it overrides the preset list of extensions):

1. Exclude specific file name name.extension
2. Exclude entire extension *.extension
3. Exclude extension with ? wildcard *.exten?ion
jeffshead
Enthusiast
Posts: 71
Liked: 3 times
Joined: May 05, 2016 1:07 pm
Full Name: Jeff
Contact:

Re: veeam 12.1 suspicious files

Post by jeffshead »

Gostev wrote: Dec 11, 2023 3:24 pm what if we automatically added to exclusions all known ransomware extensions detected during backups in the first 24 hours following the Veeam installation?
This is an interesting idea. Adding a long list of exclusions, one-by-one is tedious.
Dima P. wrote: Any specific regular expressions that might come handy for your environment?
The only thing that I would suggest is considering being able to include the path or a partial path of the detected file. For example, if the following file was detected:

Code: Select all

[11.12.2023 00:33:36.068]    <77> Warning (3)    OPTIPLEX-7070:abb4cc4e-bb84-4cac-8146-c5cfe7662e5d:C:\Users\Jeff\AppData\Roaming\GPSoftware\Directory Opus\Buttons:Office.dop
  • Exclude full path: C:\Users\Jeff\AppData\Roaming\GPSoftware\Directory Opus\Buttons\Office.dop
  • Exclude wildcard path: *\GPSoftware\Directory Opus\Buttons\Office.dop
  • Exclude wildcard path, wildcard name: *\GPSoftware\Directory Opus\Buttons\*.d?p
As Gostev pointed out, how much more CPU intensive would this make the search?
cgsm
Enthusiast
Posts: 93
Liked: 19 times
Joined: Oct 05, 2021 3:55 pm
Contact:

Re: veeam 12.1 suspicious files

Post by cgsm »

I agree that the new Malware Scan functionality could definitely use some revising and polishing. It does seem a bit rushed. I understand the purpose, and do want to use this, but I am getting a bunch of false-positives and very little diagnostic info to debug with (i.e.: no list of files that Veeam doesn't like).

I am especially getting the "too many files have changed" warning on Remote Desktop servers. I assume because of session related files and caching of user profile files. Not 100% sure though since I cannot get a list of files Veeam doesn't like!

I think improvements could be:
1) Ignore previously "clean" files. A VM shouldn't be reflagged as "possible malware" over and over.
2) More diagnostic info! What file(s) are the issue.
3) Some more tuning.
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev » 1 person likes this post

The good news is, virtually all the alert thresholds should already be tunable via the registry settings. We will start sharing them as soon as we understand from support cases which specific ones would be helpful to change for the majority of users (and change the defaults accordingly).

The main problem is that to date, we could only test this functionality on our own production environment, while every environment is so very different. We made and tuned the engine to work perfectly at Veeam's own prod, at which point sitting even one more year on this code would not improve it by even a bit. So it's more of "letting it out of a cage" and not "rushing it". Instead of keeping it in the same exact 4 walls for one more year, now we can finally learn from so many more real world environments!

BTW, people are often forgetting there is one million active Veeam servers out there, so a million of unique production environments. It is only looking through this prism that makes you realize that no amount of internal testing can prepare any new feature for this world. And that real functionality improvements are only possible through processing feedback from those hundreds thousands of different, unique environments - the variety we can never possibly replicate in our own QA labs.

In the end though, the same issue gives Veeam a huge advantage. While all the early adopters will always be upset because everyone fully excepts any new feature to perform flawlessly in their particular environment (forgetting it's just one in a million!), with time Veeam is able to polish each feature to the extent no other vendor possibly can, simply because we polish on more environments than all of our competitors combined ;)
Dima P.
Product Manager
Posts: 14417
Liked: 1576 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: veeam 12.1 suspicious files

Post by Dima P. » 1 person likes this post

Exclude full path: C:\Users\Jeff\AppData\Roaming\GPSoftware\Directory Opus\Buttons\Office.dop
Exclude wildcard path: *\GPSoftware\Directory Opus\Buttons\Office.dop
Exclude wildcard path, wildcard name: *\GPSoftware\Directory Opus\Buttons\*.d?p
As Gostev pointed out, how much more CPU intensive would this make the search?
We will research the possibility of adding this functionality to one of the upcoming releases, makes total sense! I doubt that CPU consumption will noticeably bump up the current system requirements, will see when we have this functionality ready.
I am especially getting the "too many files have changed" warning on Remote Desktop servers. I assume because of session related files and caching of user profile files
This check indeed tracks and warns you whenever more than 50% of the files with certain "useful" extension are deleted or modified, is there any particular pattern or extension that stands out? The screenshot of the corresponding malware event would do the best!
Ignore previously "clean" files. A VM shouldn't be reflagged as "possible malware" over and over.
If you mark specific machine and all the related restore points as clean the workload wont be marked as infected automatically, only when new malware event is detected. Can you please confirm if you see any new events being raised in B&R after the machine and restore points were marked as clean? Thank you!
d.artzen
Enthusiast
Posts: 62
Liked: 28 times
Joined: Jan 14, 2022 9:16 am
Full Name: Daniel Artzen
Location: Germany
Contact:

Re: veeam 12.1 suspicious files

Post by d.artzen »

Dima P. wrote: Dec 11, 2023 5:04 pm
1. Exclude specific file name name.extension
2. Exclude entire extension *.extension
3. Exclude extension with ? wildcard *.exten?ion
It seems to me that at least number 1 does not work as described, or I am doing something wrong. Like I wrote in my other thread I have made several exclusions for file types (your number 2), which work fine. But our latest backups still flagged some files as suspicious, so I checked again and found some files where I also made exclusions for the exact filename (i.e. a file that is named en.ttt which exists on several folders and is part of a 7-zip installation). I made an exclusion for en.ttt, but it still gets flagged as suspicious because of known malware extension.
jeffshead
Enthusiast
Posts: 71
Liked: 3 times
Joined: May 05, 2016 1:07 pm
Full Name: Jeff
Contact:

Re: veeam 12.1 suspicious files

Post by jeffshead »

I got the same results that d.artzen posted. I added the following list of excludes and I still get the same warnings about the same suspicious file extensions in the same machines. Adding the filenames doesn't seem to have any effect. What am I missing or not doing correctly?

Below is the exported list of exclusions. This list was created based on the log file that I posted in my previous post.

Code: Select all

<RansomwareExclusions>
    <Includes />
    <Excludes>
        <Item>
            Drive.oxr
        </Item>
        <Item>
            OpusUnknown.oxr
        </Item>
        <Item>
            lnkfile.oxr
        </Item>
        <Item>
            OpusCollectionItem.oxr
        </Item>
        <Item>
            OpusZip.oxr
        </Item>
        <Item>
            OpusTextHandler.oxr
        </Item>
        <Item>
            OpusPictureHandler.oxr
        </Item>
        <Item>
            AllFilesystemObjects.oxr
        </Item>
        <Item>
            Directory.oxr
        </Item>
        <Item>
            AllFiles.oxr
        </Item>
        <Item>
            CompressedFolder.oxr
        </Item>
        <Item>
            groups.oxr
        </Item>
        <Item>
            Applications.dop
        </Item>
        <Item>
            Drives.dop
        </Item>
        <Item>
            Office.dop
        </Item>
        <Item>
            Office365.dop
        </Item>
        <Item>
            OpenOffice.dop
        </Item>
        <Item>
            Menu.dop
        </Item>
        <Item>
            Operations.dop
        </Item>
        <Item>
            File Display.dop
        </Item>
        <Item>
            Images.dop
        </Item>
        <Item>
            Image Viewer.dop
        </Item>
        <Item>
            English.afd
        </Item>
        <Item>
            French.afd
        </Item>
        <Item>
            German.afd
        </Item>
        <Item>
            Spanish.afd
        </Item>
        <Item>
            en.ttt
        </Item>
        <Item>
            QuickStartGuide.wiki
        </Item>
        <Item>
            HttpLuaModule.wiki
        </Item>
        <Item>
            ClosingTagUnitTest.1.inc.fixed
        </Item>
        <Item>
            ClosingTagUnitTest.3.inc.fixed
        </Item>
        <Item>
            ClosingTagUnitTest.4.inc.fixed
        </Item>
        <Item>
            ClosingTagUnitTest.5.inc.fixed
        </Item>
        <Item>
            ClosingTagUnitTest.6.inc.fixed
        </Item>
        <Item>
            ClosingTagUnitTest.7.inc.fixed
        </Item>
        <Item>
            CastSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            ControlStructureSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            ControlStructureSpacingUnitTest.js.fixed
        </Item>
        <Item>
            FunctionClosingBraceSpaceUnitTest.inc.fixed
        </Item>
        <Item>
            FunctionClosingBraceSpaceUnitTest.js.fixed
        </Item>
        <Item>
            FunctionOpeningBraceSpaceUnitTest.inc.fixed
        </Item>
        <Item>
            FunctionOpeningBraceSpaceUnitTest.js.fixed
        </Item>
        <Item>
            FunctionSpacingUnitTest.1.inc.fixed
        </Item>
        <Item>
            FunctionSpacingUnitTest.2.inc.fixed
        </Item>
        <Item>
            FunctionSpacingUnitTest.3.inc.fixed
        </Item>
        <Item>
            FunctionSpacingUnitTest.5.inc.fixed
        </Item>
        <Item>
            FunctionSpacingUnitTest.6.inc.fixed
        </Item>
        <Item>
            LanguageConstructSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            LogicalOperatorSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            LogicalOperatorSpacingUnitTest.js.fixed
        </Item>
        <Item>
            MemberVarSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            ObjectOperatorSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            OperatorSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            OperatorSpacingUnitTest.js.fixed
        </Item>
        <Item>
            PropertyLabelSpacingUnitTest.js.fixed
        </Item>
        <Item>
            ScopeClosingBraceUnitTest.inc.fixed
        </Item>
        <Item>
            ScopeKeywordSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            SemicolonSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            SemicolonSpacingUnitTest.js.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.1.css.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.1.inc.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.1.js.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.2.css.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.2.inc.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.2.js.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.3.css.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.3.inc.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.3.js.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.4.inc.fixed
        </Item>
        <Item>
            SuperfluousWhitespaceUnitTest.5.inc.fixed
        </Item>
        <Item>
            ConcatenationSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            DoubleQuoteUsageUnitTest.inc.fixed
        </Item>
        <Item>
            EchoedStringsUnitTest.inc.fixed
        </Item>
        <Item>
            EmbeddedPhpUnitTest.inc.fixed
        </Item>
        <Item>
            LowercasePHPFunctionsUnitTest.inc.fixed
        </Item>
        <Item>
            ObjectMemberCommaUnitTest.js.fixed
        </Item>
        <Item>
            FunctionDeclarationArgumentSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            LowercaseFunctionKeywordsUnitTest.inc.fixed
        </Item>
        <Item>
            MultiLineFunctionDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            MultiLineFunctionDeclarationUnitTest.js.fixed
        </Item>
        <Item>
            OperatorBracketUnitTest.inc.fixed
        </Item>
        <Item>
            OperatorBracketUnitTest.js.fixed
        </Item>
        <Item>
            ControlSignatureUnitTest.inc.fixed
        </Item>
        <Item>
            ControlSignatureUnitTest.js.fixed
        </Item>
        <Item>
            ElseIfDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            ForEachLoopDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            ForLoopDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            ForLoopDeclarationUnitTest.js.fixed
        </Item>
        <Item>
            InlineIfDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            LowercaseDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            SwitchDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            BlockCommentUnitTest.inc.fixed
        </Item>
        <Item>
            DocCommentAlignmentUnitTest.inc.fixed
        </Item>
        <Item>
            DocCommentAlignmentUnitTest.js.fixed
        </Item>
        <Item>
            FileCommentUnitTest.1.inc.fixed
        </Item>
        <Item>
            FileCommentUnitTest.1.js.fixed
        </Item>
        <Item>
            FunctionCommentUnitTest.inc.fixed
        </Item>
        <Item>
            InlineCommentUnitTest.inc.fixed
        </Item>
        <Item>
            InlineCommentUnitTest.js.fixed
        </Item>
        <Item>
            LongConditionClosingCommentUnitTest.inc.fixed
        </Item>
        <Item>
            LongConditionClosingCommentUnitTest.js.fixed
        </Item>
        <Item>
            PostStatementCommentUnitTest.1.js.fixed
        </Item>
        <Item>
            PostStatementCommentUnitTest.inc.fixed
        </Item>
        <Item>
            VariableCommentUnitTest.inc.fixed
        </Item>
        <Item>
            ClassDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            LowercaseClassKeywordsUnitTest.inc.fixed
        </Item>
        <Item>
            SelfMemberReferenceUnitTest.inc.fixed
        </Item>
        <Item>
            ClassDefinitionClosingBraceSpaceUnitTest.css.fixed
        </Item>
        <Item>
            ClassDefinitionOpeningBraceSpaceUnitTest.css.fixed
        </Item>
        <Item>
            ColonSpacingUnitTest.css.fixed
        </Item>
        <Item>
            ColourDefinitionUnitTest.css.fixed
        </Item>
        <Item>
            DisallowMultipleStyleDefinitionsUnitTest.css.fixed
        </Item>
        <Item>
            ForbiddenStylesUnitTest.css.fixed
        </Item>
        <Item>
            IndentationUnitTest.1.css.fixed
        </Item>
        <Item>
            OpacityUnitTest.css.fixed
        </Item>
        <Item>
            SemicolonSpacingUnitTest.css.fixed
        </Item>
        <Item>
            ShorthandSizeUnitTest.css.fixed
        </Item>
        <Item>
            ArrayBracketSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            ArrayDeclarationUnitTest.1.inc.fixed
        </Item>
        <Item>
            ArrayDeclarationUnitTest.2.inc.fixed
        </Item>
        <Item>
            NamespaceDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.10.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.11.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.12.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.13.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.14.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.16.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.2.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.3.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.5.inc.fixed
        </Item>
        <Item>
            FunctionCallSignatureUnitTest.inc.fixed
        </Item>
        <Item>
            FunctionClosingBraceUnitTest.inc.fixed
        </Item>
        <Item>
            MethodDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.1.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.10.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.11.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.12.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.13.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.3.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.6.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.7.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.9.inc.fixed
        </Item>
        <Item>
            PropertyDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            UseDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            ShortFormTypeKeywordsUnitTest.inc.fixed
        </Item>
        <Item>
            NullableTypeDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            ReturnTypeDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            DeclareStatementUnitTest.inc.fixed
        </Item>
        <Item>
            FileHeaderUnitTest.10.inc.fixed
        </Item>
        <Item>
            FileHeaderUnitTest.11.inc.fixed
        </Item>
        <Item>
            FileHeaderUnitTest.12.inc.fixed
        </Item>
        <Item>
            FileHeaderUnitTest.2.inc.fixed
        </Item>
        <Item>
            FileHeaderUnitTest.4.inc.fixed
        </Item>
        <Item>
            FileHeaderUnitTest.7.inc.fixed
        </Item>
        <Item>
            ImportStatementUnitTest.inc.fixed
        </Item>
        <Item>
            OpenTagUnitTest.2.inc.fixed
        </Item>
        <Item>
            BooleanOperatorPlacementUnitTest.inc.fixed
        </Item>
        <Item>
            AnonClassDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            ClassInstantiationUnitTest.inc.fixed
        </Item>
        <Item>
            OpeningBraceSpaceUnitTest.inc.fixed
        </Item>
        <Item>
            ObjectOperatorIndentUnitTest.inc.fixed
        </Item>
        <Item>
            FunctionCallSignatureUnitTest.js.fixed
        </Item>
        <Item>
            FunctionDeclarationUnitTest.inc.fixed
        </Item>
        <Item>
            FunctionDeclarationUnitTest.js.fixed
        </Item>
        <Item>
            IncludingFileUnitTest.inc.fixed
        </Item>
        <Item>
            MultiLineConditionUnitTest.inc.fixed
        </Item>
        <Item>
            MultiLineConditionUnitTest.js.fixed
        </Item>
        <Item>
            ClassDeclarationUnitTest.1.inc.fixed
        </Item>
        <Item>
            ArbitraryParenthesesSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            DisallowSpaceIndentUnitTest.1.inc.fixed
        </Item>
        <Item>
            DisallowSpaceIndentUnitTest.2.inc.fixed
        </Item>
        <Item>
            DisallowSpaceIndentUnitTest.3.inc.fixed
        </Item>
        <Item>
            DisallowSpaceIndentUnitTest.css.fixed
        </Item>
        <Item>
            DisallowSpaceIndentUnitTest.js.fixed
        </Item>
        <Item>
            DisallowTabIndentUnitTest.1.inc.fixed
        </Item>
        <Item>
            DisallowTabIndentUnitTest.2.inc.fixed
        </Item>
        <Item>
            DisallowTabIndentUnitTest.3.inc.fixed
        </Item>
        <Item>
            DisallowTabIndentUnitTest.css.fixed
        </Item>
        <Item>
            DisallowTabIndentUnitTest.js.fixed
        </Item>
        <Item>
            IncrementDecrementSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            IncrementDecrementSpacingUnitTest.js.fixed
        </Item>
        <Item>
            ScopeIndentUnitTest.1.inc.fixed
        </Item>
        <Item>
            ScopeIndentUnitTest.1.js.fixed
        </Item>
        <Item>
            ScopeIndentUnitTest.2.inc.fixed
        </Item>
        <Item>
            ScopeIndentUnitTest.3.inc.fixed
        </Item>
        <Item>
            SpreadOperatorSpacingAfterUnitTest.inc.fixed
        </Item>
        <Item>
            DisallowAlternativePHPTagsUnitTest.1.inc.fixed
        </Item>
        <Item>
            DisallowAlternativePHPTagsUnitTest.2.inc.fixed
        </Item>
        <Item>
            DisallowShortOpenTagUnitTest.1.inc.fixed
        </Item>
        <Item>
            DisallowShortOpenTagUnitTest.2.inc.fixed
        </Item>
        <Item>
            LowerCaseConstantUnitTest.inc.fixed
        </Item>
        <Item>
            LowerCaseConstantUnitTest.js.fixed
        </Item>
        <Item>
            LowerCaseKeywordUnitTest.inc.fixed
        </Item>
        <Item>
            LowerCaseTypeUnitTest.inc.fixed
        </Item>
        <Item>
            UpperCaseConstantUnitTest.inc.fixed
        </Item>
        <Item>
            FunctionCallArgumentSpacingUnitTest.inc.fixed
        </Item>
        <Item>
            OpeningFunctionBraceBsdAllmanUnitTest.inc.fixed
        </Item>
        <Item>
            OpeningFunctionBraceKernighanRitchieUnitTest.inc.fixed
        </Item>
        <Item>
            DisallowMultipleStatementsUnitTest.inc.fixed
        </Item>
        <Item>
            MultipleStatementAlignmentUnitTest.inc.fixed
        </Item>
        <Item>
            MultipleStatementAlignmentUnitTest.js.fixed
        </Item>
        <Item>
            NoSpaceAfterCastUnitTest.inc.fixed
        </Item>
        <Item>
            SpaceAfterCastUnitTest.inc.fixed
        </Item>
        <Item>
            SpaceAfterNotUnitTest.inc.fixed
        </Item>
        <Item>
            SpaceAfterNotUnitTest.js.fixed
        </Item>
        <Item>
            SpaceBeforeCastUnitTest.inc.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.3.css.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.3.js.fixed
        </Item>
        <Item>
            EndFileNewlineUnitTest.4.inc.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.1.css.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.1.inc.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.1.js.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.2.css.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.2.inc.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.2.js.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.6.inc.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.8.inc.fixed
        </Item>
        <Item>
            EndFileNoNewlineUnitTest.9.inc.fixed
        </Item>
        <Item>
            LineEndingsUnitTest.1.inc.fixed
        </Item>
        <Item>
            LineEndingsUnitTest.2.inc.fixed
        </Item>
        <Item>
            LineEndingsUnitTest.css.fixed
        </Item>
        <Item>
            LineEndingsUnitTest.js.fixed
        </Item>
        <Item>
            InlineControlStructureUnitTest.1.inc.fixed
        </Item>
        <Item>
            InlineControlStructureUnitTest.js.fixed
        </Item>
        <Item>
            DocCommentUnitTest.inc.fixed
        </Item>
        <Item>
            DocCommentUnitTest.js.fixed
        </Item>
        <Item>
            EmptyPHPStatementUnitTest.inc.fixed
        </Item>
        <Item>
            OpeningBraceSameLineUnitTest.inc.fixed
        </Item>
        <Item>
            ArrayIndentUnitTest.inc.fixed
        </Item>
        <Item>
            DisallowLongArraySyntaxUnitTest.1.inc.fixed
        </Item>
        <Item>
            DisallowLongArraySyntaxUnitTest.2.inc.fixed
        </Item>
        <Item>
            DisallowShortArraySyntaxUnitTest.inc.fixed
        </Item>
        <Item>
            Custom Location Bar (Thio).dop
        </Item>
        <Item>
            Menu (Thio).dop
        </Item>
        <Item>
            My Main Toolbar (Thio).dop
        </Item>
        <Item>
            Utilities (Thio).dop
        </Item>
    </Excludes>
</RansomwareExclusions>
It would also be much better if we could import exclusions with .txt (line-break separated) and csv files instead of being limited to xml.

Also, from my previous post, I neglected to suggest excluding a directory or wildcard directory:
  • Exclude full path: C:\Users\Jeff\AppData\Roaming\GPSoftware\Directory Opus\Buttons\Office.dop
  • Exclude wildcard path: *\GPSoftware\Directory Opus\Buttons\Office.dop
  • Exclude wildcard path, wildcard name: *\GPSoftware\Directory Opus\Buttons\*.d?p
  • Exclude path w/o extension or filename: *\GPSoftware\Directory Opus\Buttons\*
  • Exclude wildcard path w/o extension or filename: *\GPSoftware\*\Buttons\*
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev »

Individual files cannot be excluded if their extension is still monitored. You can only exclude the entire extension from monitoring.

We can add this capability in future updates, however does it really make sense? If you have a software that uses/generates files with the certain extension that is also a known ransomware extension, would not it make more sense to exclude the entire extension, as opposed to keep excluding individual files as they appear? What are your thoughts on the process of using individual files exclusion?

Also, even if you keep managing this list manually, the list has got too become too large eventually, which will cause scalability issues (huge list of individual exclusions for our code to go through).
d.artzen
Enthusiast
Posts: 62
Liked: 28 times
Joined: Jan 14, 2022 9:16 am
Full Name: Daniel Artzen
Location: Germany
Contact:

Re: veeam 12.1 suspicious files

Post by d.artzen »

Gostev, this contradicts Dimas Post as well as the explanation for the exclusions found in the VBR console. There the usage is described the same way as Dima wrote in his post above and with exactly that syntax. And you say, the syntax filename.extension is currently not implemented.
As for the why we would want to use it that way:
In our environment I have excluded mostly the complete extensions, which works fine. In the few cases that I have for the whole filename.extensions, these are files that are part of an installation. So I know these files are good, but new ones with the same extensions don't have to be safe, since I don't anticipate new ones with that extension.
I try an example: One of our applications regularly produce .cnc files with different names, so I have no other option then to exclude the whole .cnc extension. On the other hand, I only know that the en.ttt file that are on a 7-zip installation on our server is safe, because it was created during the installation. So I would like to exclude this known good file, even in several locations, but not all .ttt files that could appear in the future.
I agree that this is more the exception than the rule, but in the same way you could say, why does an antivirus software allow excludes of specific files and not only extensions or folders? Same situation in my opinion.
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev »

Sorry, corrected the first line of my previous response for added clarity. Dima will provide some actual examples later.

OK, so basically you don't expect "individual file" exclusions to be one-off and relatively rare occasions. Makes sense!
jeffshead
Enthusiast
Posts: 71
Liked: 3 times
Joined: May 05, 2016 1:07 pm
Full Name: Jeff
Contact:

Re: veeam 12.1 suspicious files

Post by jeffshead »

Image
What are your thoughts on the process of using individual files exclusion?
d.artzen summed it up nicely. Not much for me to add.
Dima P.
Product Manager
Posts: 14417
Liked: 1576 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: veeam 12.1 suspicious files

Post by Dima P. » 1 person likes this post

Hello folks,

Exclusion list overrides the files predefined by Veeam Security team in a SuspiciousFiles.xml. The file itself is located here: C:\Program Files\Veeam\Backup and Replication\Backup\SuspiciousFiles.xml. Please keep in mind that it is not editable, so the exclusions should be set via UI.

Exclude should be set with same syntax as defined in SuspiciousFiles.xml for example:

Case A:
1. Extension *.fixed is defined in SuspiciousFiles
2. In order to exclude the MultipleStatementAlignmentUnitTest.js.fixed, you need to specify *.fixed in the exclude mask

Case B:
1. CriticalBreachDetected.pdf is defined in SuspiciousFiles
2. In order to exclude the CriticalBreachDetected.pdf, you need to specify CriticalBreachDetected.pdf in the exclude mask
d.artzen
Enthusiast
Posts: 62
Liked: 28 times
Joined: Jan 14, 2022 9:16 am
Full Name: Daniel Artzen
Location: Germany
Contact:

Re: veeam 12.1 suspicious files

Post by d.artzen »

Sorry, but this scenario seems awfully specific and not really how it works in the field (and how antivirus solutions handle exceptions). The way the option is described in Jeffs screenshot I would expect it to exclude a file, regardless of the extension being suspicious. Otherwise this specific option makes no sense to me, since it could never work. Either a file is excluded from scan or it is not. To make additional conditions to this is very counter-intuitive.
Dima P.
Product Manager
Posts: 14417
Liked: 1576 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: veeam 12.1 suspicious files

Post by Dima P. »

I would expect it to exclude a file, regardless of the extension being suspicious.
Agree that we need to define the exclusion for specific file or paths, this improvement request is already noted!
To make additional conditions to this is very counter-intuitive.
Agree here too, we plan to add ability to search for the exact extension while defining the exclusion as well as improve the UI a bit to accurately represent correct options.
Trelor
Enthusiast
Posts: 47
Liked: 15 times
Joined: Apr 27, 2015 6:02 pm
Contact:

Re: veeam 12.1 suspicious files

Post by Trelor »

Gostev wrote: Dec 11, 2023 3:24 pm Having said that, this just gave me an idea: what if we automatically added to exclusions all known ransomware extensions detected during backups in the first 24 hours following the Veeam installation? This means assuming we're dealing with a clean environment at least originally, which is almost always the case anyhow. What do you think? This will save users some time plus cleaning the excludes list is always easier than populating one ;)
Please implement this auto exclude for the first backup after 12.1 so we can upgrade to 12.1
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev »

Not sure I follow - why can you not upgrade now, until this implemented? You don't have to enable malware detection if you don't want this functionality. Or any other new feature, for that matter.
Trelor
Enthusiast
Posts: 47
Liked: 15 times
Joined: Apr 27, 2015 6:02 pm
Contact:

Re: veeam 12.1 suspicious files

Post by Trelor »

We are waiting for approval to upgrade the socket licenses to enterprise plus and I just want a fine tuned version of the malware detection feature so we can use that as leverage to upgrade the licenses. I will only surrender the socket licenses when you personally take them away from us.

TLDR: We want a fine-tuned Malware Detection and 12.1
Gostev
Chief Product Officer
Posts: 31561
Liked: 6725 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: veeam 12.1 suspicious files

Post by Gostev »

Well, I can guarantee you that I personally will never take them away from you :) besides, I remain a strong supporter of letting existing customers keep using them for as long as they want, so long as renewal costs are indexed appropriately to account for the continuous cores/socket density growth, as it's really getting out of hand these days.

And I can also promise you there will be strong focus on Malware Detection overall. While fine tuning the existing V1 functionality is of course the most important thing devs must focus on right now, I'm more excited about what's coming next in this department!
cgsm
Enthusiast
Posts: 93
Liked: 19 times
Joined: Oct 05, 2021 3:55 pm
Contact:

Re: veeam 12.1 suspicious files

Post by cgsm »

Dima P. wrote: Dec 11, 2023 6:32 pm is there any particular pattern or extension that stands out? The screenshot of the corresponding malware event would do the best!
Dima, I cannot determine which pattern or extensions Veeam isn't happy with. The message in VBR is just "...too many files have had their names changed...". Is there a log file of the list of extensions that triggered this warning?
pugs21
Lurker
Posts: 1
Liked: never
Joined: Dec 12, 2023 7:09 pm
Full Name: Jason Shaffer
Contact:

[MERGED] Feature Request - Malware Exclusion By File Location

Post by pugs21 »

I really like the idea of malware scans for backups, however we run some files (Autocad for example) that pop up as .stn files and are flagged as malware in the scan. Everyday when these servers are backed up they are flagged. I have investigated these files and know they are good, but it continually shows up in the list as malware and flags the VM as infected in the backups. I wish there was a way to exclude certain files, i.e. i know that file x on volume y is clean and is acceptable, so that my entire vm is not flagged as infected. My choices are either have it flagged or dont scan it, no middle ground.
Post Reply

Who is online

Users browsing this forum: Google [Bot] and 103 guests