Emanuel Gonzalez skrev den 2019-01-30 15:03:
# cat 30012019_term_4373.doc | sigtool –hex-dump | head -c 2048 >
customsig.ndb
--hex-dump is not create a signature
and if i understand your wish you want to make a 2K sigs on first 2K of
the doc file ?
so you can use hex-dump to make content
J.R. is correct about the `--database=FILE/DIR` or `-d FILE/DIR` option being
for clamscan. The for clamd, you'll have to place it in your database
directory.
Our documentation on Github is moving from the clamav-devel repo over to our
https://github.com/Cisco-Talos/clamav-faq repository so i
Also I believe you have to use clamscan, not clamdscan if you want to
use the "-d" option. However once you test it successfully you can add
it as a custom db for clamd to load.
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clam
Hi Emanuel,
When creating ClamAV signatures, refer to
https://github.com/Cisco-Talos/clamav-devel/tree/dev/0.102/docs/UserManual,
specifically:
- NDBs:
https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.102/docs/UserManual/Signatures/ExtendedSignatures.md
- LDBs:
https://github.com/Cisco-Talo
Hello,
I read this document
https://blog.clamav.net/2016/06/create-your-own-anti-virus-signatures.html
I need add a signature to database:
# cat 30012019_term_4373.doc | sigtool –hex-dump | head -c 2048 > customsig.ndb
# clamdscan -d customsig.ndb 30012019_term_4373.doc
WARNING: Ignoring unsu
