[clamav-users] Minor bug or working as intended?
Andrew C Aitchison
clamav at aitchison.me.uk
Fri Feb 25 16:39:53 UTC 2022
On Fri, 25 Feb 2022, Laurent S. via clamav-users wrote:
> I've had the same issue. In the last two years, I was regularly
> writing YARA sigs in ClamAV and finding that it behaves in strange
> ways... Especially the regex integration.
... ...
> After too many timeouts and strange stuff, I decided to rewrite all
> of the sigs I had written to LDB. It's not easy to read, less fun to
> write... but damn it's much more reliable and fast.
Did you build any tools to help with your rewrite ?
If so they might be a good starting point for a YARA <-> LDB convertor,
which sounds like a useful project.
--
Andrew C. Aitchison Kendal, UK
andrew at aitchison.me.uk
More information about the clamav-users
mailing list