Hi Sandeep,

There's no need to convert them. Just put them straight into the clamav database directory and call them whatever_you_want.ldb eg

/var/lib/clamav/fireeye.ldb

As long as the name you choose doesn't conflict with ClamAV's naming (eg main/daily/bytecode etc), the only bits you need to work about are keeping the 'ldb' extension, and ensuring the files are in the correct location  with the correct ownership and permissions.

Mark

On 14 Dec 2020, at 8:33 pm, Sandeep Talla <sandeep.talla@inadev.com> wrote:

Hi All,

We have ClamAV installed on Ubuntu. On Ubuntu, the rules can be specified or modified under the directory /var/lib/clamav/main.cvd. However,  We are trying to consume ClamAV rules from the FireEye as shown below link which is .ldb file and we are trying to convert to .cvd format. 

Could you please let us know the steps on how to convert the .ldb to .cvd? Or how to consume the .ldb file in Ubuntu? 

FireEye: https://github.com/fireeye/red_team_tool_countermeasures/blob/master/all-clam.ldb

Thank you for your time and consideration.

--

Thanks,

Sandeep

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml