Whitelist

These signatures or paths are scanned but no actions will be applied if a detection is made for the whitelisted rule. Rule specific action config which is empty [].

[Signatures]
  [Signatures."eicar"] = ["alert"]
  [Signatures."dropper"] = ["quarantine"]

[Paths]
  [Paths."/var/www/html/index.php"]
    eicar = ["alert"]

  [Paths."/var/www/html/loader.php"]
    eicar = ["quarantine", "clean"]