The inotify-tools may be useful in this case. An example like in https://fitzcarraldoblog.wordpress.com/2016/02/20/automatically-detecting-files-placed-in-my-downloads-directory-in-gentoo-linux-and-scanning-them-for-viruses/ should work. 

On Wed, Oct 21, 2020 at 1:06 PM <giovanni+clamav@paclan.it> wrote:

On 10/21/20 4:08 AM, Olivier via clamav-users wrote:
> Hi
>
>> I would like to know what would be the best way to do a virus scan of changed or new files only. I
>> want to run a daily scan of changed and new files during weekdays and run a full scan on
>> weekends.
>>
>> I did some search and was able to find a few ways of doing it but I would also like your suggestions.
>
> There is that daemon that can report any changed files in an operating
> system, I known I played witg it many years ago as I wanted somethiung
> able to scan anything on the fly. It was on FreeBSD, but such daemon
> should exist for Linux too and it could send the files/filenames to the
> scanning daemon.
>
you could use incrond(8) which uses the inotify(2) interface to scan for changed files, this can be used to produce a list of files that will be scanned later.

 Giovanni

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


--
Regards....

Nibin.

https://about.me/nibinvm