Hello,
I'm trying to make an Icon signature for an unwanted software. I downloaded, installed and configured ClamAV. I got multiple Icon signatures from "clamscan --debug unwanted.exe".
I can make Logical signatures(.ldb), but there is not a single example of how to use Icon signatures in Logical signatures.(and other parameters too.)
And I would like to know; as you know ClamAV does support YaRa rules so why AMP does not?
Regards.
