[clamav-users] Malware/ransomware and Yara signatures with clamav

[Alain Zidouemba]

We don't ship Yara rules. We continue to ship signatures in the ClamAV
signatures format

ClamAV includes Yara support so that end-users can choose to locally use
Yara rules like the ones you referenced.

Alain

On Sat, May 13, 2017 at 2:12 PM, Alex <mysqlstudent at gmail.com> wrote:

> Hi,
>
> On Sat, May 13, 2017 at 1:24 PM, Alain Zidouemba
> <azidouemba at sourcefire.com> wrote:
> > Yara rules have been supported by ClamAV since 2015:
> > http://blog.clamav.net/2015/06/clamav-099b-meets-yara.html
>
> Yes, I saw that, but maybe I'm misunderstanding the benefit of yara.
>
> Are the signatures not updated/created in real-time? I don't see any
> signatures/descriptions within the last few months.
>
> Thanks,
> Alex
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>