Content Scanning & Quarantine
Real-time malware and content scanning with automated quarantine workflows.
Scanning Engine
Every file scanned in real-time before it reaches storage — ICAP AV (ClamAV bundled, any ICAP scanner pluggable), YARA rules, and multi-format extraction.
Engines
- ClamAV bundled by default — swap in any ICAP-compatible AV scanner
- ICAP protocol means MnemoShare integrates with the AV stack you already run
- YARA rules for custom threat signatures
Coverage
- Multi-format extraction: Office, PDFs, ZIP, TAR, GZIP, BZIP2, XZ
- Scan sources: upload, manual, scheduled, SMTP, system
Ingest & Extract
Multi-format expansion: Office, PDF, ZIP, TAR, GZIP, BZIP2, XZ. Sourced from upload, SMTP, or scheduled scan.
ICAP AV scan
Signature-based real-time malware detection over the ICAP protocol. ClamAV is bundled; any ICAP-compatible scanner (Sophos, F-Secure, Trend Micro) drops in.
YARA rules
Custom threat patterns for org-specific indicators — leaked watermarks, competitor data, novel malware families.
Quarantine Workflow
Automated quarantine with admin review, exemption management, and full audit trail.
Detection
- Auto-quarantine — file isolated immediately
- Download blocked until admin resolves status
- Dashboard with threat type, uploader, and date
Resolution
- Admin review: approve, delete, or exempt
- Exemption management for false positives
| File Name | Size | Uploader | Detected | Threat | Status | Actions |
|---|---|---|---|---|---|---|
| invoice_q1_2026.docx | 248 KB | l.thompson@hospital.org | 3/17/2026 | virus | Unresolved | |
| backup_archive.tar.gz | 12.4 MB | sftp@acme.io | 3/17/2026 | archive | Unresolved | |
| campaign_data.pdf | 1.2 MB | s.williams@hospital.org | 3/17/2026 | yara | Unresolved | |
| firmware_update.bin | 4.7 MB | sftp@acme.io | 3/16/2026 | backdoor | Unresolved |
Beyond traditional MFT
Most managed file transfer platforms were designed before modern threats existed. Here is how MnemoShare compares.
| Capability | Traditional MFT | MnemoShare |
|---|---|---|
| Scanning | Relies on endpoint antivirus or no scanning | Inline ClamAV/ICAP scanning on every file upload |
| Custom rules | No custom signature support | YARA rules for organization-specific threat signatures |
| Archive scanning | Cannot scan inside archives | Multi-format extraction: Office, PDF, ZIP, TAR, GZIP, BZIP2, XZ |
| Quarantine | Infected files may still be accessible | Automatic quarantine blocks access until admin reviews |
| Integration | Separate scanning tools required | Built-in scanning integrated with audit trail and workflows |
See how MnemoShare compares. Schedule a demo
Real-world use cases
Zero-day protection
Custom YARA rules detect a new ransomware variant targeting healthcare. File is quarantined before reaching storage, admin notified immediately. Exemption created for false-positive test files.
Archive inspection
Partner sends ZIP file containing hundreds of documents. MnemoShare extracts and scans each file individually. One malicious PDF detected and quarantined; clean files proceed normally.
Compliance scanning
Regulated industry requires all incoming files scanned before processing. ClamAV catches known malware, YARA rules flag organization-specific patterns like leaked document watermarks or competitor trade secrets.
Frequently asked questions
How does file scanning work in MnemoShare?
Every file uploaded to MnemoShare is scanned in real-time via ClamAV/ICAP integration before it reaches storage. Scanning supports custom YARA rules for organization-specific signatures and extracts content from multi-format archives.
What happens when malware is detected?
The file is automatically quarantined — blocked from download or further processing. Administrators receive a notification and can review the quarantined file, delete it, or create an exemption for known false positives.
Can I add custom scanning rules?
Yes. MnemoShare supports YARA rules for custom threat signatures. Write rules targeting specific file patterns, document watermarks, or organization-specific indicators and deploy them alongside ClamAV signatures.
Ready to see MnemoShare in action?
Start a free trial, schedule a walkthrough, or dive into the docs.