Re: [clamav-users] YARA support on ClamAV

2019-07-06 Thread Thomas Trüten
Hello Munaf, I've to correct myself. Due to a bug in the yara definitions, they can currently only be used to a limited extent or at best not to be used at all. See ISSUE: https://github.com/extremeshok/clamav-unofficial-sigs/issues/203 and workaround: https://github.com/extremeshok/clamav-unoffic

Re: [clamav-users] YARA support on ClamAV

2019-07-01 Thread Thomas Trüten
Hello Munaf, you can use the clamav-unofficial-sigs by extremeshok (https://github.com/extremeshok/clamav-unofficial-sigs). The last update of the plugin is already a while ago (2017), the signatures, including yara, still work, because the plugin is just an interface to the signatures. Maybe thi

Re: [clamav-users] YARA support on ClamAV

2019-07-01 Thread Micah Snyder (micasnyd) via clamav-users
Munaf, At present we don’t have any plans to support YARA modules. We’re not against it, but with our team size, it’s not a high enough priority to put on our roadmap. If someone in the community puts in the time to implement it and submit a pull-request on GitHub to add YARA module support, we