clamav-unofficial-sigs(8)

NAME
clamav-unofficial-sigs - Download, test, and install third-party ClamAV signature databases.

SYNOPSIS
clamav-unofficial-sigs [options]

DESCRIPTION
clamav-unofficial-sigs provides a simple way to download, test, and update third-party signature databases provided by Sanesecurity, FOXHOLE, OITC, BOFHLAND, CRDF, Porcupine, Securiteinfo, MalwarePatrol, Yara-Rules Project, etc. It will also generate and install cron, logrotate, and man files.

UPDATES
Script updates can be found at: https://github.com/extremeshok/clamav-unofficial-sigs

OPTIONS
This script follows the standard GNU command line syntax.

Usage: clamav-unofficial-sigs.sh [OPTION] [PATH|FILE]

-c, --config  Use a specific configuration file or directory   eg: '-c /your/dir' or ' -c /your/file.name'    Note: If a directory is specified the directory must contain atleast:    master.conf, os.conf or user.conf   Default Directory: /usr/local/etc/clamav-unofficial-sigs

-F, --force  Force all databases to be downloaded, could cause ip to be blocked

-h, --help  Display this script's help and usage information

-V, --version  Output script version and date information

-v, --verbose  Be verbose, enabled when not run under cron

-s, --silence  Only output error messages, enabled when run under cron

-d, --decode-sig  Decode a third-party signature either by signature name   (eg: Sanesecurity.Junk.15248) or hexadecimal string.   This flag will 'NOT' decode image signatures

-e, --encode-string  Hexadecimal encode an entire input string that can   be used in any '*.ndb' signature database file

-f, --encode-formatted  Hexadecimal encode a formatted input string containing   signature spacing fields '{}, (), *', without encoding   the spacing fields, so that the encoded signature   can be used in any '*.ndb' signature database file

-g, --gpg-verify  GPG verify a specific Sanesecurity database file   eg: '-g filename.ext' (do not include file path)

-i, --information  Output system and configuration information for   viewing or possible debugging purposes

-m, --make-database  Make a signature database from an ascii file containing   data strings, with one data string per line.  Additional   information is provided when using this flag

-t, --test-database  Clamscan integrity test a specific database file   eg: '-t filename.ext' (do not include file path)

-o, --output-triggered  If HAM directory scanning is enabled in the script's   configuration file, then output names of any third-party   signatures that triggered during the HAM directory scan

-w, --whitelist <signature-name>  Adds a signature whitelist entry in the newer ClamAV IGN2   format to 'my-whitelist.ign2' in order to temporarily resolve   a false-positive issue with a specific third-party signature.   Script added whitelist entries will automatically be removed   if the original signature is either modified or removed from   the third-party signature database

--check-clamav  If ClamD status check is enabled and the socket path is correctly   specifiedthen test to see if clamd is running or not

--upgrade  Upgrades this script and master.conf to the latest available version

--install-all  Install and generate the cron, logroate and man files, autodetects the values   based on your config files

--install-cron  Install and generate the cron file, autodetects the values   based on your config files

--install-logrotate  Install and generate the logrotate file, autodetects the   values based on your config files

--install-man  Install and generate the man file, autodetects the   values based on your config files

--remove-script  Remove the clamav-unofficial-sigs script and all of   its associated files and databases from the system

SEE ALSO
clamd(8),
    clamscan(1)

COPYRIGHT
Copyright (c) Adrian Jon Kriel :: admin@extremeshok.com

You are free to use, modify and distribute, however you may not remove this notice.

LICENSE
BSD (Berkeley Software Distribution)

BUGS
Report bugs to https://github.com/extremeshok/clamav-unofficial-sigs

AUTHOR
Adrian Jon Kriel :: admin@extremeshok.com Originially based on Script provide by Bill Landry