public void AmsiSessionShouldDetectMalware_Buffer()
{
using var application = AmsiContext.Create("MyApplication");
using var session = application.CreateSession();
// https://en.wikipedia.org/wiki/EICAR_test_file
Assert.True(session.IsMalware(Encoding.ASCII.GetBytes(@"X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*"), "EICAR"));
Assert.False(session.IsMalware(new byte[] { 0, 0, 0, 0 }, "EICAR"));
}
public void AmsiSessionShouldDetectMalware_String()
{
using (var application = AmsiContext.Create("MyApplication"))
using (var session = application.CreateSession())
{
// https://en.wikipedia.org/wiki/EICAR_test_file
Assert.True(session.IsMalware(@"X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*", "EICAR"));
Assert.False(session.IsMalware("0000", "EICAR"));
}
}
