[clamav-users] possible to use clamscan to search for strings in mail?

[Arnaud Jacques]

Hello Alex,


> We do have a large IMAP ~200GB, and in order to find letters 
> containing specific "keyword",
> grep is not good because of base64 encoding. So the idea is to look 
> through with antivirus scanner for "virus" inside letters, which is 
> not a virus but a (not sure, may be) "bytecode signature" = "keyword"
>
> Sounds good? A link to a howto will be appreciated.

Yes it is possible. Please see the official documentation :
https://www.clamav.net/documents/creating-signatures-for-clamav

-- 
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.44.39.76.46
E-mail : aj at securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom

Securiteinfo.com
La Sécurité Informatique - La Sécurité des Informations.
266, rue de Villers
60123 Bonneuil en Valois