🦠Verifying ClamAV on macOS, and How an EICAR Test File Gets Quarantined by Resident Antivirus
A record of verifying ClamAV — used in a digital archive SIP-creation workflow — on macOS (Apple Silicon), where an EICAR test file vanished the moment it reached the disk, and isolating the cause. It turned out to be the on-access scan of resident antivirus, not XProtect.
clamavmacoshomebrewセキュリティ