{"id":4412,"date":"2026-06-08T17:52:54","date_gmt":"2026-06-08T14:52:54","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4412"},"modified":"2026-06-08T17:52:54","modified_gmt":"2026-06-08T14:52:54","slug":"eicar-test-files-uploaded-as-documents-to-salesforce-are-not-detected-as-malicious-by-cloud-protection-for-salesforce","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/eicar-test-files-uploaded-as-documents-to-salesforce-are-not-detected-as-malicious-by-cloud-protection-for-salesforce\/","title":{"rendered":"Eicar test files uploaded as documents to Salesforce are not detected as malicious by Cloud Protection for Salesforce"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>Salesforce stores &quot;documents&quot; in three different objects: ContentVersion (aka Files), Document, Attachment. WithSecure Cloud Protection for Salesforce does not appear to be checking Documents uploaded via API or Manually. It is testing ContentVersion and Attachment.<\/p>\n<h3>Resolution:<\/h3>\n<p>This is by design. WithSecure Cloud Protection for Salesforce only scans files stored as <span style=\"font-family: Courier New,Courier,monospace;\">ContentDocument<\/span> \/ <span style=\"font-family: Courier New,Courier,monospace;\">ContentVersion<\/span> and Attachment objects. We do not plan to add support for Document objects as Salesforce told us earlier that they would discontinue this file storage in the future. In the long-run, Salesforce plan to have only one file storage based on <span style=\"font-family: Courier New,Courier,monospace;\">ContentDocument<\/span> \/ <span style=\"font-family: Courier New,Courier,monospace;\">ContentVersion<\/span> objects, which provide better security and usability.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Salesforce stores &#8222;documents&#8220; in three different objects: ContentVersion (aka Files), Document, Attachment. F-Secure does not appear to be checking Documents uploaded via API or Manually. It is testing ContentVersion and Attachment.<\/p>\n","protected":false},"template":"","support_article_product":[107],"class_list":["post-4412","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000012720","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 14:52:54","import_hash":"2465e003b75e43bd30982a80ba8be4ad3e53bc92","vanilla_article_id":31251,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/31251-eicar-test-files-uploaded-as-documents-to-salesforce-are-not-detected-as-malicious-by-cloud-protection-for-salesforce","vanilla_kb_id":30,"vanilla_category_id":125,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article\/4412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=4412"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article_product?post=4412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}