Kubernetes Test Malware

[prashansa_goel]

Is there a way to test a sample malware file on Kubernetes? I know that in windows servers we can test it out using wild fire file.

[JayGolf]

Hi @prashansa_goel ,

You can try uploading it to the Wildfire portal for analysis: https://wildfire.paloaltonetworks.com/wildfire/dashboard . What type of file is it?

[prashansa_goel]

I meant is there a way to test that the agent installed on the Kubernetes node is working fine by dropping any test malware file on the node?

[AAnsari]

You can create a common Ubuntu deployment in your Kubernetes cluster, and then interactively logon to it by using  kubectl exec -n <name space here> <pod-name> -it -- /bin/sh 

Once you logon, you can download the malware or Eicar file to test it out. 

FYI - we tested it, and it allows the file to be downloaded, the file does not get removed at the download time. At the execution of the file, it find it as malicious and delete.