...
|
...
|
@@ -19,13 +19,13 @@
|
19
|
19
|
- [Logical signatures](#logical-signatures)
|
20
|
20
|
- [Subsignature Modifiers](#subsignature-modifiers)
|
21
|
21
|
- [Special Subsignature Types](#special-subsignature-types)
|
22
|
|
- - [Macro subsignatures (clamav-0.96) : <span class="nodecor">`${min-max}MACROID$`</span>](#macro-subsignatures-clamav-096-span-classnodecormin-maxmacroidspan)
|
23
|
|
- - [PCRE subsignatures (clamav-0.99) : <span class="nodecor">`Trigger/PCRE/[Flags]`</span>](#pcre-subsignatures-clamav-099-span-classnodecortriggerpcreflagsspan)
|
|
22
|
+ - [Macro subsignatures (clamav-0.96) : <span class="nodecor">`${min-max}MACROID$`</span>](#macro-subsignatures-clamav-096---span-classnodecormin-maxmacroid-span)
|
|
23
|
+ - [PCRE subsignatures (clamav-0.99) : <span class="nodecor">`Trigger/PCRE/[Flags]`</span>](#pcre-subsignatures-clamav-099---span-classnodecortrigger-pcre-flags-span)
|
24
|
24
|
- [Icon signatures for PE files](#icon-signatures-for-pe-files)
|
25
|
25
|
- [Signatures for Version Information metadata in PE files](#signatures-for-version-information-metadata-in-pe-files)
|
26
|
26
|
- [Trusted and Revoked Certificates](#trusted-and-revoked-certificates)
|
27
|
27
|
- [Signatures based on container metadata](#signatures-based-on-container-metadata)
|
28
|
|
- - [Signatures based on ZIP/RAR metadata (obsolete)](#signatures-based-on-ziprar-metadata-obsolete)
|
|
28
|
+ - [Signatures based on ZIP/RAR metadata (obsolete)](#signatures-based-on-zip-rar-metadata-obsolete)
|
29
|
29
|
- [Whitelist databases](#whitelist-databases)
|
30
|
30
|
- [Signature names](#signature-names)
|
31
|
31
|
- [Using YARA rules in ClamAV](#using-yara-rules-in-clamav)
|
...
|
...
|
@@ -594,7 +594,7 @@ to:
|
594
|
594
|
|
595
|
595
|
- In the example, `{min-max}` is `{6-7}` and it is relative to the start of a `616161` match.
|
596
|
596
|
|
597
|
|
-- For more information and examples please see <https://wwws.clamav.net/bugzilla/show_bug.cgi?id=164>.
|
|
597
|
+- For more information and examples please see <https://bugzilla.clamav.net/show_bug.cgi?id=164>.
|
598
|
598
|
|
599
|
599
|
### PCRE subsignatures (clamav-0.99) : <span class="nodecor">`Trigger/PCRE/[Flags]`</span>
|
600
|
600
|
|