Glossary: Logs and Data Sources for Investigations

ClamAV

A free antivirus scanner. Alex added the attacker tool's SHA-256 hash to it as a custom signature, and the scan found /tmp/.sync on the shop server; ClamAV marks signatures you write yourself as UNOFFICIAL.