Dave, Check out: https://github.com/vrtadmin/clamav-devel/blob/master/docs/signatures.pdf
Thanks. -- Joel Esler | Talos: Manager| jes...@cisco.com<mailto:jes...@cisco.com> On Oct 26, 2016, at 8:45 AM, Dave McMurtrie <dav...@andrew.cmu.edu<mailto:dav...@andrew.cmu.edu>> wrote: Hi, I know it exists, because I remember reading it before. However, I can't find it now. I found the docs at https://github.com/vrtadmin/clamav-devel/tree/master/docs but I didn't find what I was looking for there. Specifically, I'm looking for information on using pattern matching or regexes in an ndb signature. I'd like to come up with a signature that will match any email body that contains a URL in the .top domain. Thanks! Dave _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
