Difference between revisions of "Directory"
(New page: ''Directory'' is the generic directly flagging command. ==Usage== Directory:[Description],[Directory name],<advanced directory parameters> ===Examples=== Directory:"<$DIR_PROG>","<$PRO...) |
|||
Line 11: | Line 11: | ||
===Description=== | ===Description=== | ||
* The first parameter is a description; either as plaintext or, better, using a [[Description templates|description template]] to have it appear localized in the scanner GUI. | * The first parameter is a description; either as plaintext or, better, using a [[Description templates|description template]] to have it appear localized in the scanner GUI. | ||
− | * The second parameter defines the path to look in, using [[Path templates|path templates]] and [[AlgoPrefix|Algo-Prefixes]] if you want. | + | * The second parameter defines the path to look in, using [[Path templates|path templates]] and [[AlgoPrefix|Algo-Prefixes]] if you want, where the later only affect the final folder, not the full folder path. {{AlgoPrefix}} |
* Finally, the advanced directory parameters are very similar to [[Advanced file parameters|advanced file parameters]] - in fact, the first one has to be ''filename'' to specify which file inside the folder should be checked for, but all further parameters are standard advanced file parameters. | * Finally, the advanced directory parameters are very similar to [[Advanced file parameters|advanced file parameters]] - in fact, the first one has to be ''filename'' to specify which file inside the folder should be checked for, but all further parameters are standard advanced file parameters. | ||
Revision as of 16:16, 17 February 2008
Directory is the generic directly flagging command.
Usage
Directory:[Description],[Directory name],<advanced directory parameters>
Examples
Directory:"<$DIR_PROG>","<$PROGRAMFILES>\Spyware\","filename=malware.exe,size>=100"
This example would detect the folder C:\Program files\Spyware\, if this folder contains a file malware.exe of at least 100 byte size.
Description
- The first parameter is a description; either as plaintext or, better, using a description template to have it appear localized in the scanner GUI.
- The second parameter defines the path to look in, using path templates and Algo-Prefixes if you want, where the later only affect the final folder, not the full folder path. AP
- Finally, the advanced directory parameters are very similar to advanced file parameters - in fact, the first one has to be filename to specify which file inside the folder should be checked for, but all further parameters are standard advanced file parameters.