October 10, 2018
View f61e92d

Changing numerous scan options' names, primarily those of heuristic signatature alert options. Original options (command line and clamd) will remain as deprecated & undocumented for a couple releases. Added 2 extra scan options to allow users to differentiate between alerting on encrypted archives vs encrypted documents (bb11911).

Micah Snyder (micasnyd) authored on 2018/10/10 22:02:28
July 21, 2018
View d7979d4

Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files.

Micah Snyder authored on 2018/07/21 11:28:48
August 24, 2017
View 7269188

bb11896 -- increasing size of max filter for pdf filter heuristic. Still have work to be done to investigate whitelisting issue. This commit additionally fixes a compile error when building with json-c and fixes a couple of minor warnings.

Micah Snyder authored on 2017/08/24 04:08:47
August 16, 2017
View 4cd97da

eliminating warnings, mostly with regards to signed vs unsigned comparisons, some of which could have been functional bugs if negative values were used (for offsets, etc). cleaned up a couple of macros and cleaned up some ifdefs.

Micah Snyder authored on 2017/08/16 05:50:01
August 11, 2017
View dd2ed14

adding a few minor changes to eliminate warnings, the most interesting of which was a missing function prototype for cache_get_MD5.

Micah Snyder authored on 2017/08/11 04:40:52
August 10, 2017
View 14e2247

updating the copyright for a number of tiles.

Micah Snyder authored on 2017/08/10 03:28:47
August 9, 2017
View 7b1f1aa

fixed minor warnings regarding type conversions.

Micah Snyder authored on 2017/08/09 06:38:17
June 20, 2017
View 4ae32e4

bb11625 - adding heuristic check for XZ dictionary size evasion

Mickey Sola authored on 2017/06/20 04:41:17
June 8, 2017
View cbff50b

scanscript - moving temp file fmap messaging to debug stream

Mickey Sola authored on 2017/06/08 04:11:45
May 24, 2017
View 167c007

fix 0.99.3 false negative of virus Pdf.Exploit.CVE_2016_1046-1.

Steven Morgan authored on 2017/05/24 04:56:41
May 11, 2017
View 28afc94

fix for amp allmatch.

Steven Morgan authored on 2017/05/11 05:51:16
April 27, 2017
View 3e42216

Remove redundant fp check.

Steven Morgan authored on 2017/04/27 07:09:50
April 19, 2017
View cbf5017

bb11805 fix multiple results. Refactor false positive and heuristic precedence logic.

Steven Morgan authored on 2017/04/19 01:03:36
February 2, 2017
View 631cb6a

Fixes and updates to intermediate container sig rules based on code review

Mickey Sola authored on 2017/02/02 07:29:27
January 20, 2017
View 5828828

freeing context container array

Mickey Sola authored on 2017/01/20 04:17:03