rlopezcnm at gmail
Sep 17, 2009, 10:55 AM
Post #1 of 1
(419 views)
Permalink
|
|
How/where do I learn more about a rule/signature?
|
|
If I want to understand why an email was considered to be a thread due
to a particular rule/signature, for example Email.Phishing.Webmail-5,
where do I look for more information?
I grep'd all the files on my system associated with ClamAV and the
only file I could find Email.Phishing.Webmail-5 in was
/var/lib/clamav/main.cld.
--
Robert Lopez
Unix Systems Administrator
Central New Mexico Community College (CNM)
525 Buena Vista SE
Albuquerque, New Mexico 87106
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
|
