Netskope Threat Labs

POLICY-OTHER eicar file detected

IPS-CFWIPS-SWG

5 SIDs: 42372, 42373, 42374, 42375, 42376

First seen
July 2023
Last seen
October 2026

Detects the EICAR antivirus test file moving across the network. The harmless test string lets security teams verify that scanning and blocking work end to end, so this signature supports validation workflows.