[clamav-users] Documentation for creating ndb signatures?
Joel Esler (jesler)
jesler at cisco.com
Wed Oct 26 10:09:13 EDT 2016
Check out: https://github.com/vrtadmin/clamav-devel/blob/master/docs/signatures.pdf
Joel Esler | Talos: Manager| jesler at cisco.com<mailto:jesler at cisco.com>
On Oct 26, 2016, at 8:45 AM, Dave McMurtrie <dave64 at andrew.cmu.edu<mailto:dave64 at andrew.cmu.edu>> wrote:
I know it exists, because I remember reading it before. However, I
can't find it now. I found the docs at
https://github.com/vrtadmin/clamav-devel/tree/master/docs but I didn't
find what I was looking for there.
Specifically, I'm looking for information on using pattern matching or
regexes in an ndb signature. I'd like to come up with a signature that
will match any email body that contains a URL in the .top domain.
Help us build a comprehensive ClamAV guide:
More information about the clamav-users