Integrate ClamAV into a staging upload or mail path and test a safe known-detection fixture alongside ordinary files. Check whether scans happen before content is available to users, how large files are handled, and what operators see when the scanner is unavailable.
Signature updates and alert handling are part of the system. Decide whether suspicious files are quarantined, rejected, or reviewed, and prevent logs from exposing private file contents. A scanner is useful when the complete workflow blocks known threats without silently losing legitimate data.
Akousa