Re: Amavis and ClamAV and YARA

I ran YARArules via some software I dont remember the name of on extracted JavaScripts from quarantined files and got some hits. But the only AV I use is clamav+sanesecurity so probably any other AVengine would have given better numbers. But after Oliviers tests I understand that perhaps it is

Re: Amavis and ClamAV and YARA

On Fri Feb 26 2016 03:39:51 Olivier Nicole said: > > I installed YARA and YARA-rules (from > https://github.com/Yara-Rules/rules0 and I have been quite disappointed. That URL doe not load. -- He felt as if he'd been shipwrecked on the Titanic but in the nick

Amavis and ClamAV and YARA

Following the discussion yesterday about ClamAV and YARA, I decided to give it a try. The integration of YARA into ClamAV is still very limited; ClamAV does not support the module (plug-in) framework (many of Android rules are based on a module), nor does it support several other features. It