[clamav-users] Question regarding Metasploit signatures
clamav at jubileegroup.co.uk
Sat Aug 31 14:59:56 EDT 2019
On Sat, 31 Aug 2019, J.R. via clamav-users wrote:
> If the virus pattern is in one of the database files, then you are
> alerted... If it's not, then no alert... That's how every antivirus
There's a bit more to it than that. Some detection is based on other
characteristics, such as behaviour. But I think it's true to say that
the mainstay of detection by ClamAV is through the signature databases.
That's how I use it - there are a few excellent third-party databases.
More information about the clamav-users