When trying to use filesize conidtion in a Yara sig

rule FileSize_200KB
{
    condition:
       filesize < 200KB
}

I get

LibClamAV Warning: load_oneyara: yara rule contains no supported strings, skipping YARA.FileSizeExample

Am I missing something or if indeed not supported, could it please be added? Would help to "failsafe" rules

Thanks

Axb
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to