Salesforce stores "documents" in three different objects: ContentVersion (aka Files), Document, Attachment. WithSecure Cloud Protection for Salesforce does not appear to be checking Documents uploaded via API or Manually. It is testing ContentVersion and Attachment.
This is by design. WithSecure Cloud Protection for Salesforce only scans files stored as ContentDocument / ContentVersion and Attachment objects. We do not plan to add support for Document objects as Salesforce told us earlier that they would discontinue this file storage in the future. In the long-run, Salesforce plan to have only one file storage based on ContentDocument / ContentVersion objects, which provide better security and usability.
Article no: 000026236