The eicar test virus will trigger the 'DefaultAV' ClamAV engine when it comes into Sentry either as an attachment (in a file) or if the string is the only request payload value (see log entry below).
When sending the eicar test virus as a file attachment, the test file can be base64 encoded or not, compressed or not.
For more information on the eicar test virus see: http://www.eicar.org
0 Comments