On 03/07/19 17:59, atat wrote:
You say in documentation:You should also drop, by default, all Office documents with macros. What plugin / method do You reccomend for that ?
I'm no expert in detecting macros, but there at least two ways of doing that that comes to mind:
- Clamav with the option OLE2BlockMacros - This package https://github.com/bigio/spamassassin-vba-macro Or you could patch something up with python oletools -- Best regards, Riccardo Alfieri Spamhaus Technology https://www.spamhaustech.com/
