HeinleinSupport / olefy

olefy - oletools verify over TCP socket
Apache License 2.0
43 stars 7 forks source link

Whitelisting for Macro-Code #13

Open sbidy opened 3 years ago

sbidy commented 3 years ago

First of all - thank you for this rspamd extension. I've developed the MacroMilter as a possibility to integrated the olevba into the postfix several years ago. It's great to see some other approaches 😄 .

Do you have plans to add a whitelist for macros? My idea was to normalize the VBA code an generate a hash over it. This will be provide the possibility to whitelist on the lowest level.