view common/ole2macro.cf @ 305:38e35360a390

Blacklist hive, polkitd, cinstall and more as SSH logins
author IBBoard <dev@ibboard.co.uk>
date Thu, 20 Feb 2020 16:57:09 +0000
parents dae1088dd218
children
line wrap: on
line source

# Run VBA Macro checks without ClamAV
loadplugin OLE2Macro ole2macro.pm

body MICROSOFT_OLE2MACRO eval:check_microsoft_ole2macro()
describe MICROSOFT_OLE2MACRO Has an attachment that contains an OLE2 Macro
score MICROSOFT_OLE2MACRO 4