Everyone that reads this blog may not read all of the other Sourcefire/Vulnerability Research Team (VRT) Blogs, so I thought I'd add a quick comment here about one of the Malware Research Teams articles over on our VRT Blog.
The article is entitled "Android Basic Block Signatures" and he goes over some good syntax for the ClamAV Signature Language.
Please check it out here: http://blog.talosintel.com/2013/10/android-basic-block-signatures.html
