convenient.email

Today's no-context question: If you put the EICAR test string in that audit log, would it delete the log? What happens if the string is pushed to a log aggregator and then viewed by an analyst?