Kevin A. McGrail skrev den 2017-06-13 21:45:
On 6/13/2017 3:38 PM, Noel wrote:
Maybe expired rules could automatically score as 0.01 rather than
invalid. Then log a warning to remind the admin.
I think that would defeat the purpose since the goal is likely to make
the core engine run more efficiently for RDJ items that are no longer
relevant and just waste cycles.
otoh, if rules expire, there would be less problems add new rules later
corpus score process is good dokumented, would that mean no more corpus
use ?
life would indeed be lot more simple
working with spamassassin is like trying to catch 0day virus in a zip
file, with a yara rule
