Thread Emulation - Manual Test emulation

[Geomix7]

I am looking for a procedure to manual emulate a file on thread emulation r77.30 to test a file?

[G_W_Albrecht]

See sk110375 - How to emulate files manually on the SandBlast TE Appliance?

[G_W_Albrecht]

This sk110375 is not available anymore 😞

Nowadays you have to use the

Threat Emulation API

The Threat Emulation RESTful API is available on any Check Point appliance with enabled Threat Emulation blade and in the ThreatCloud.

The Threat Emulation RESTful API allows you to:

• Query for emulation results
• Download reports
• Upload files for emulation/extraction

Refer to Threat Prevention API Reference Guideand R80 Check Point API Reference Guide

[Chris_Atkinson]

Depending upon the use case there is also the following service available:

https://threatpoint.checkpoint.com/ThreatPortal/emulation

[Baasanjargal_Ts]

Hello,

I hope it can help to you.

#te_add_file -f=/tmp/test.pdf

When running this command you can see logs for emulation if Emulation works normally.

[Geomix7]

i already run this command but i did not found if this file is detected or prevented.Do you know if i can found this info?

[G_W_Albrecht]

Look into ted.elg !