topic Re: Kubernetes Test Malware in General Topics

Kubernetes Test Malware

prashansa_goel — Tue, 13 Feb 2024 21:26:04 GMT

Is there a way to test a sample malware file on Kubernetes? I know that in windows servers we can test it out using wild fire file.

Re: Kubernetes Test Malware

JayGolf — Wed, 14 Feb 2024 05:32:01 GMT

Hi @prashansa_goel ,

You can try uploading it to the Wildfire portal for analysis: https://wildfire.paloaltonetworks.com/wildfire/dashboard . What type of file is it?

Re: Kubernetes Test Malware

prashansa_goel — Thu, 15 Feb 2024 15:44:36 GMT

I meant is there a way to test that the agent installed on the Kubernetes node is working fine by dropping any test malware file on the node?

Re: Kubernetes Test Malware

AAnsari — Wed, 19 Feb 2025 21:57:14 GMT

You can create a common Ubuntu deployment in your Kubernetes cluster, and then interactively logon to it by using kubectl exec -n <name space here> <pod-name> -it -- /bin/sh

Once you logon, you can download the malware or Eicar file to test it out.

FYI - we tested it, and it allows the file to be downloaded, the file does not get removed at the download time. At the execution of the file, it find it as malicious and delete.