[clamav-users] [External] Re: Scan very slow

Steve Basford steveb_clamav at sanesecurity.com
Tue Apr 9 15:18:06 UTC 2019


On 2019-04-09 12:02, Brent Clark via clamav-users wrote:
> Cant those be adopted / managed by Sanesecurity?
> 
> For all you know, those are already in Sanesecurity.

They are... and have been for quite some time:


"The following databases are distributed by Sanesecurity, but produced 
by Porcupine Signatures"

phishtank.ndb.

Briefly...

Number of sigs in phishtank.ndb: 9,309

eg:

PhishTank.Phishing.6002281, matches:

https://www.phishtank.com/phish_detail.php?phish_id=6002281

So, there is going to be some possible cross over now that 
Phish.Phishing.REPHISH_ID_20190404_67-6931549-0
type signatures names from PhishTank feed are in daily.ldb and 
daily.ndb.

I'll check back on the thread later.

-- 
Cheers,

Steve
Twitter: @sanesecurity



More information about the clamav-users mailing list