February 19, 2019
View d92c012

Multiple blacklist sigs can now match with allmatch

Andrew authored on 2019/02/19 06:04:46
February 13, 2019
View 1d7f6b2

Add support for cert blacklisting and whitelisting upfront

Andrew authored on 2019/02/13 05:10:04
January 26, 2019
View e1cbc27

Updating and cleaning up copyright notices.

Micah Snyder authored on 2019/01/26 00:15:50
September 15, 2018
View b9c3525

Fix support for authenticode signatures from external .cat files This commit adds back in support for whitelisting files based on signatures from .cat files loaded in via a '-d' flag to clamscan. This also makes it so that a .crb blacklist rule match can't be overruled by a signature in a .cat file

Andrew authored on 2018/09/15 03:39:47
September 6, 2018
View 1b3395f

Fix bug in how ptrs to file data are used for computing Authenticode hash We used to get a pointer to file data without locking and for some samples this pointer would be invalidated by the time we used it. Now, we just store the offset for the sections that should be hashed as part of the Authenticode hash computation and get the file data pointer right before it's needed.

Andrew authored on 2018/09/06 07:50:59
September 2, 2018
View 0f53ea6

Add support for MD5 and SHA256 hash-based validation of the exe code Also refactors the code a bit to consolidate some duplicate functionality

Andrew authored on 2018/09/02 12:29:45
September 18, 2015
View 46a35ab

mass update of copyright headers

Mickey Sola authored on 2015/09/18 02:41:26
October 28, 2012
View 56b4f4b

Change the cert management code to cache the trusted/revoked root certs in the engine struct

Shawn Webb authored on 2012/10/28 03:58:03
January 8, 2012
View 0393aa5

cli_checkfp_pe

aCaB authored on 2012/01/08 11:19:29
January 5, 2012
View d1fcd16

merge master

aCaB authored on 2012/01/05 06:55:07
January 3, 2012
View 7cb86fa

few fixmes fixed

aCaB authored on 2012/01/03 23:46:20
December 31, 2011
View 6bc5d0c

embedded authenticode verification

aCaB authored on 2011/12/31 00:07:53
December 30, 2011
View 3a55c60

refactor

aCaB authored on 2011/12/30 23:01:50
View 5d49bd0

readd (broken) support for emb cats

aCaB authored on 2011/12/30 03:39:19
View 774120f

temp commit

aCaB authored on 2011/12/30 01:14:34