What is a signature-based antivirus

Metasploit

Created: 2022-07-27
Tags: #fleeting


Most antivirus and security solutions have a database of known threats.

Database of Known Threats
Signature-based Antivirus
-> detect threats by comparing suspicious files to Known Threats Database
-> and raise an alert if there is a match.
Encoders can have a limited success rate as antivirus solutions can perform additional checks.

References