[Community-sigs] How to maintain human readable signature database?

Rafael Ferreira raf at uvasoftware.com
Sat Mar 26 17:16:58 EDT 2016


Clamav (as of 0.99) supports YARA rules (see https://plusvic.github.io/yara/ <https://plusvic.github.io/yara/>) which are, objectively, more human friendly. 

> On Mar 26, 2016, at 2:14 PM, Do <do1 at yandex.ru> wrote:
> 
> Hello,
> 
> Current signatures format is machine readable hex string dump sort of like
> machine code.
> 
> How developers maintain signature database, in a way so it's will be possible to
> add comments, write some strings in text instead of pure hex, so it all become
> bit more human readable, structured, and self-documented?
> What are suggestions on that?
> 
> Best regards,
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml




More information about the Community-sigs mailing list