Sentinel supports enabling third party anti-virus signatures to improve the detection rate. Full documentation can be found below:
https://docs.danami.com/sentinel/settings/antivirus/signature-providers
- Navigate to Sentinel Anti-malware -> Settings -> Anti-virus Settings -> Signature Providers
- Enable the Interserver signature provider.
- Press the update button on the page then the restart button to restart the Anti-virus signature service. You can view the signature download logs under Sentinel Anti-malware -> Logs -> Signature log.
- Once the new signatures have been downloaded to the /var/lib/clamav/ directory they will be loaded into ClamAV within the hour. You can press the Signature reload button on the dashboard or issue the command clamdscan --reload if you want to load them earlier.
- Important: Remember to disable automatic quarantine under Quarantine Settings -> Quarantine hits when first enabling any third party signatures so that you can work out any false positives.