[Esd-l] macro scanning...

[Agung Kuswanto NCS]

Hi

Sorry if it is misleading.
If we want sanitizer to be able to strip off any office attachment contains
any macro. Is there a need to customise the sanitizer code? or is it
sufficient to play with score settings?

Thanks & Best Regards 
Agung K

-----Original Message-----
From: John D. Hardin
To: Agung Kuswanto   NCS
Cc: 'esd-l at spconnect.com'
Sent: 11/1/03 4:48 AM
Subject: RE: [Esd-l] macro scanning...

On Fri, 31 Oct 2003, Agung Kuswanto   NCS wrote:

> If I want to detect any macro, may I know what is the string to be
checked?

You'd probably have to get a copy of the macro language manual and
check for each of the however many keywords that are available.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "...people who like assault weapons they should join the United
  States Army, we have them."
                              -- Gen. Wesley Clark, candidate, on CNN

  "Germans who wish to use firearms should join the SS or the SA -
  ordinary citizens don't need guns, as their having guns doesn't
  serve the State."
                              -- Heinrich Himmler
-----------------------------------------------------------------------
   5 days until Matrix Revolutions