Hi,
Using clamav-unofficial-signatures and I'm trying to ignore a yara rule due to many FPs. The blocked message refers to the YARA.invalid_trailer_structure.UNOFFICIAL as the offending signature. However, entering any of following in local.ign2 file, clamav ignores it and keeps blocking:
YARA.invalid_trailer_structure
Any idea what I'm doing wrong here?
thanks
Using clamav-unofficial-signatures and I'm trying to ignore a yara rule due to many FPs. The blocked message refers to the YARA.invalid_trailer_structure.UNOFFICIAL as the offending signature. However, entering any of following in local.ign2 file, clamav ignores it and keeps blocking:
YARA.invalid_trailer_structure
Any idea what I'm doing wrong here?
thanks