Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Collaborator

Thread Emulation - Manual Test emulation

I am looking for a procedure to manual emulate a file on thread emulation r77.30 to test a file?

 

0 Kudos
6 Replies
Highlighted
Champion
Champion

0 Kudos
Highlighted
Champion
Champion

This sk110375 is not available anymore 😞

Nowadays you have to use the

Threat Emulation API

The Threat Emulation RESTful API is available on any Check Point appliance with enabled Threat Emulation blade and in the ThreatCloud.

The Threat Emulation RESTful API allows you to:

  • Query for emulation results
  • Download reports
  • Upload files for emulation/extraction

Refer to Threat Prevention API Reference Guideand R80 Check Point API Reference Guide

0 Kudos
Highlighted
Employee++
Employee++

 

Depending upon the use case there is also the following service available:

 

https://threatpoint.checkpoint.com/ThreatPortal/emulation

0 Kudos
Highlighted
Collaborator

Hello,

I hope it can help to you.

#te_add_file -f=/tmp/test.pdf

When running this command you can see logs for emulation if Emulation works normally.

Highlighted
Collaborator

i already run this command but i did not found if this file is detected or prevented.Do you know if i can found this info?
0 Kudos
Highlighted
Champion
Champion

Look into ted.elg !

0 Kudos