==== Incremental Daily and Full Weekly Scans ====

You can expand on the above by making a daily cronjob script that only scans files changed in the last 24 hours, and a weekly cronjob script that does a full filesystem scan. You may choose to do this for reasons of efficiency, as scanning only the files changed in the last 24 hours is an order of magnitude faster. Your daily cron file would look something more like this:

# Variables

# Run clamscan against the list of files and pipe the results out to the results file

# -i prints only infected files, -f is the list of files to scan, and -l is the output log

== Using Greyhole ==