Whitelist a file/hash

Zeek
1

What is the most appropriate way to whitelist a file/hash that keeps getting flagged by the MHR notice? Is there a “hash whitelist” or is a notice hook that overrides the default action needed?

Thanks,

-matt