Micah Snyder (micasnyd) via clamav-users wrote:
G.W. Haywood wrote:
Execution time will be important for scanning filesystems, less so for
scanning mail (at least for scanning low-volume mail) and readability
can be hugely important if you're writing a lot of rules. Perhaps we
should be aski
Hi,
I'm using clamd to make a large data scanning using INSTREAM (data it is
not available as files I could send to clamd). If I send only one INSTREAM
chunk with EICAR inside it is correctly detected, but if I send several
chunks plus EICAR string, it is not detected.
Example:
char *eicarTest
Hello,
I am trying to mirror the definitions database using the recommended cvdupdate
python script, however I am getting the following error code:
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate
verify failed: unable to get local issuer certificate (_ssl.c:997).
Mul
Hi there,
On Wed, 2 Mar 2022, Kris Deugau wrote:
Micah Snyder (micasnyd) via clamav-users wrote:
... some examples from my short time spent brainstorming
this a few months back.
// example logical signature
[snip]
TBH that looks almost identical to the Yara rule syntax at a quick look.
Ve
Hi there,
On Wed, 2 Mar 2022, Jonah McElfatrick via clamav-users wrote:
I am trying to mirror the definitions database using the recommended
cvdupdate python script, however I am getting the following error
code: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify
Kris Deugau wrote:
For some types of content, just allowing a plain ASCII string instead of
the hex-coded version of the same would be a big help. Or an
enhancement in the current file formats allowing embedded comments -
I've lost track of how many times I've created something complex, and
h
Hi there,
On Wed, 2 Mar 2022, Jorge Elissalde via clamav-users wrote:
I'm using clamd to make a large data scanning using INSTREAM ...
If I send only one INSTREAM chunk with EICAR inside it is correctly
detected, but if I send several chunks plus EICAR string, it is not
...
char *eicarTest =
"X