Ep4 - ClamAV - Feel the Power... of Logical Signatures
Channel: Maarten Broekman
Date: 2021-12-30

In this video, I walk through the difference between body-based and logical signatures, the structure of logical signatures, and explore some of the power in that structure by using examples from real-life investigation.

Links:
ClamAV docs: https://docs.clamav.net/
Signature manual: https://docs.clamav.net/
SaneSecurity: http://sanesecurity.com/
SecuriteInfo: https://www.securiteinfo.com/services-cybersecurite/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml
Linux Malware Detect: https://www.rfxn.com/projects/linux-malware-detect/

Screenshots usage is under fair use for purposes of commentary and teaching (https://www.copyright.gov/fair-use/more-info.html).

The ClamAV logo appears with permission.

00:00 - Intro