Re: Detecting macros in word files

2015-07-01 Thread Axb
On 01.07.2015 17:41, David B Funk wrote: On Wed, 1 Jul 2015, Axb wrote: On 01.07.2015 17:08, Steve Freegard wrote: On 01/07/15 15:18, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? If you use ClamAV; you c

Re: Detecting macros in word files

2015-07-01 Thread David B Funk
On Wed, 1 Jul 2015, Axb wrote: On 01.07.2015 17:08, Steve Freegard wrote: On 01/07/15 15:18, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? If you use ClamAV; you can enable the "OLE2BlockMacros yes" option

Re: Detecting macros in word files

2015-07-01 Thread Axb
On 01.07.2015 17:08, Steve Freegard wrote: On 01/07/15 15:18, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? If you use ClamAV; you can enable the "OLE2BlockMacros yes" option and then catch the 'Heuristics.O

Re: Detecting macros in word files

2015-07-01 Thread Steve Freegard
On 01/07/15 15:18, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? If you use ClamAV; you can enable the "OLE2BlockMacros yes" option and then catch the 'Heuristics.OLE2.ContainsMacros' reported by ClamAV (wh

Re: Detecting macros in word files

2015-07-01 Thread John Hardin
On Wed, 1 Jul 2015, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? http://impsec.org/email-tools/procmail-security.html I've been mulling trying to migrate the archive filename scan part to an SA plugin but

Re: Detecting macros in word files

2015-07-01 Thread Axb
On 01.07.2015 16:18, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? SSDEEP may be your friend

Re: Detecting macros in word files

2015-07-01 Thread Kevin A. McGrail
On 7/1/2015 10:18 AM, Marc Perkel wrote: Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? This was discussed on MD list (for example, https://www.mail-archive.com/mimedefang@lists.roaringpenguin.com/msg15713.html) but I'm doing i

Detecting macros in word files

2015-07-01 Thread Marc Perkel
Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so? -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400