Antivirus scanning read, write or both?

I have a quick question please.

Does CIS Antivirus component scan on Read, Write, or both? Thanks!

CAV is an on-access scanner, but from what I’ve seen, some file types are scanned during write as well.