On 01/07/15 15:18, Marc Perkel wrote:
Is there any way to detect macros inside of word doc files as attachments? Or linux command line utils to do so?
If you use ClamAV; you can enable the "OLE2BlockMacros yes" option and then catch the 'Heuristics.OLE2.ContainsMacros' reported by ClamAV (which is what we do here).
Kind regards, Steve.
