First of all, I know that yara rules can be used in combination with ClamAV, but here I have something else in my mind, so my question is; how can I write logical signature simillar as it is in YARA.
Here is an example; Let's say that I have three strings:
A, B and C
convert that in YARA rule:
strings: $s1 = "A" $s2 = "B" $s3 = "C" condition: any of them
Any idea how can I achieve that with ClamAV signatures?