Ep 2 - ClamAV - Creating Hash-based Signatures
Channel: Maarten Broekman
Date: 2021-12-30

In this video, I walk through the different kinds of hash-based signatures, the process of creating them, and how to take 3rd party indicators of compromise and turn them into your own hash-based signatures.

Links:
ClamAV docs: https://docs.clamav.net/
Signature manual: https://docs.clamav.net/
SaneSecurity: http://sanesecurity.com/
SecuriteInfo: https://www.securiteinfo.com/services-cybersecurite/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml
Linux Malware Detect: https://www.rfxn.com/projects/linux-malware-detect/

Screenshots usage is under fair use for purposes of commentary and teaching (https://www.copyright.gov/fair-use/more-info.html).

The ClamAV logo appears with permission.

00:00 Introduction