Custom signatures

What it does

Every new malware family usually waits for a scanner update. Custom signatures (Pro) let you add your own detection patterns the moment you have an indicator -- they run against every scanned file alongside the built-in set, including decoded content and files inside ZIP archives.

Where to find it

Settings > General > Custom signatures, directly after Page display.

How to use it

1. Press Add signature and fill in a PCRE pattern body (wrapped as /body/i automatically -- escape / as \/), a severity, and a plain-language label.
2. Press Save signatures. If any row is invalid, the whole batch is rejected with the offending row numbered, so a typo can never half-save.

Guardrails

• Patterns matching the empty string or plain benign text are refused -- either would flag the whole site.
• Custom hits are tagged custom: in findings, so you can always tell them apart from built-in signatures.