Re: Invoke-Webrequest caused security alert (and blocking!)

Unclassified | Non classifié

Hi

Thanks for the email.

That thought has crossed my mind.  Of course, here, even the lab is air gapped !

However, tomorrow when I work remotely, I intend on setting this up in my home lab – then I will be able to have internet access to try that command.

Then, if it works, I’ll have a proof of concept and we’ll discuss how this same procedure can be applied at the office.  I’d imagine we could have a machine connected to the network, pull the files down, then “sneaker net” them with a USB stick and copy from the stick to a machine inside the air gapped network.

Ok, so yes, will try that from my internet-connected home lab later today or tomorrow

Thanks again for the quick response !

From: Brendan Bell (brebell) <[email protected]>
Sent: June 11, 2025 12:59 PM
To: [email protected]
Cc: Shulist, Victor (SSC/SPC) <[email protected]>
Subject: Re: Invoke-Webrequest caused security alert (and blocking!)


Unclassified | Non classifié

Hello,

For this issue have you tried using CVDUpdate on the system you use to download files and then transfer to the air gapped network?

Brendan

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat