[clamav-users] Documentation for creating ndb signatures?

Joel Esler (jesler) jesler at cisco.com
Wed Oct 26 10:09:13 EDT 2016


Dave,

Check out: https://github.com/vrtadmin/clamav-devel/blob/master/docs/signatures.pdf


Thanks.


--
Joel Esler | Talos: Manager| jesler at cisco.com<mailto:jesler at cisco.com>





On Oct 26, 2016, at 8:45 AM, Dave McMurtrie <dave64 at andrew.cmu.edu<mailto:dave64 at andrew.cmu.edu>> wrote:

Hi,

I know it exists, because I remember reading it before.  However, I
can't find it now.  I found the docs at
https://github.com/vrtadmin/clamav-devel/tree/master/docs but I didn't
find what I was looking for there.

Specifically, I'm looking for information on using pattern matching or
regexes in an ndb signature.  I'd like to come up with a signature that
will match any email body that contains a URL in the .top domain.

Thanks!

Dave
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml




More information about the clamav-users mailing list