This has been supported since the introduction of logical signatures (ldb) in ClamAV 0.94.
- Alain On Thu, Jun 11, 2015 at 11:00 AM, Steve Basford < steveb_cla...@sanesecurity.com> wrote: > > On Thu, June 11, 2015 3:51 pm, Steven Morgan wrote: > > > > We've borrowed the yacc/lex code from yara project. > > Hi, > > Does that mean ClamAV will support this condition in the current beta: > > $match1 and not ($ignore1 or $ignore2) > > I'll wait to test once windows binary beta arrives... or find a bit > of time to fire up a linux vm. > > Cheers, > > Steve > Web : sanesecurity.com > Blog: sanesecurity.blogspot.com > > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
