[clamav-users] Documentation for creating ndb signatures?

[Joel Esler (jesler)]

Dave,

Check out: https://github.com/vrtadmin/clamav-devel/blob/master/docs/signatures.pdf


Thanks.


--
Joel Esler | Talos: Manager| jesler at cisco.com<mailto:jesler at cisco.com>





On Oct 26, 2016, at 8:45 AM, Dave McMurtrie <dave64 at andrew.cmu.edu<mailto:dave64 at andrew.cmu.edu>> wrote:

Hi,

I know it exists, because I remember reading it before.  However, I
can't find it now.  I found the docs at
https://github.com/vrtadmin/clamav-devel/tree/master/docs but I didn't
find what I was looking for there.

Specifically, I'm looking for information on using pattern matching or
regexes in an ndb signature.  I'd like to come up with a signature that
will match any email body that contains a URL in the .top domain.

Thanks!

Dave
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml