[clamav-users] YARA: filesize condition

Steven Morgan smorgan at sourcefire.com
Thu Jun 30 19:44:09 UTC 2016


On Thu, Jun 30, 2016 at 2:27 PM, Paul Kosinski <clamav-
<clamav-users at iment.com>ize < 200KB

>
> Shouldn't exactly one 'and' be an 'or' in:
>
> "($abc and not $abc) and filesize < 200KB"
>

Yes, the first 'and' must be an 'or'. Thank you!

Steve



More information about the clamav-users mailing list