I've been using Clam for a while now, but am now getting into testing out the detect-structured options to scan some file shares for credit card numbers. I've got a number of files with fake credit card info that pass a verification test (Luhn algorithm), but the scan isn't picking them up. Here's my scan options:

-v --detect-structured=yes --structured-ssn-format=0 --structured-ssn-count=10 --structured-cc-count=10 -r f:\testdata\

ClamWin version is 0.97

Thoughts? Thanks.

Are you using Clam or ClamWin? You mentioned Clam, and this is the ClamWin forum. Anyway, I tried that data loss prevention option when it first came out a few years ago but dropped it because of false positives. I recall it was developed just after Sourcefire bought Clam, so it may not have been given enough thought. I have never seen an actual detection of this, and I do not think it is reliable.

Regards,

Sorry, yes, I am using ClamWin.

Thanks for the input.