cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 1 of 6

Upload files for analysis using SFTP

Jump to solution

Hi,

I'm testing vatd in the lab, followed atd 4.8 product guide "Analyzing Malware-> Upload files for analysis using SFTP" section, I uploaded some test files (docx/xlsx/exe etc..) by using WinSCP via SFTP, but seems i can never see my atd will analyze those uploaded files. may I know where may goes wrong?

If I manually upload files in the GUI, it works perfectly.

vATD 4.8.2 - with one primary one secondary - I checked both, no analysis results found.

 

Snipaste_2020-03-27_15-58-43.pngSnipaste_2020-03-27_16-00-47.png

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 6

Re: Upload files for analysis using SFTP

Jump to solution

HI onedayoneapple

 

Please try the following:

Create a new user in ATD GUI and enable FTP access

Then in filezilla/winscp create a new connection to ATD using SFTP access and use the new user credentials you have just created

Upload a file and in ATD GUI you should see the file you uploaded with the new user account

Do not use the atdadmin account for this process as the file will not appear.  atdadmin account is for uploading systme software.

If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

View solution in original post

5 Replies
Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 6

Re: Upload files for analysis using SFTP

Jump to solution

Anyone can help on this one? 

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 6

Re: Upload files for analysis using SFTP

Jump to solution

HI onedayoneapple

 

Please try the following:

Create a new user in ATD GUI and enable FTP access

Then in filezilla/winscp create a new connection to ATD using SFTP access and use the new user credentials you have just created

Upload a file and in ATD GUI you should see the file you uploaded with the new user account

Do not use the atdadmin account for this process as the file will not appear.  atdadmin account is for uploading systme software.

If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

View solution in original post

Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: Upload files for analysis using SFTP

Jump to solution

Oh... that's the reason then... I used atdadmin account for the testing...

Many thanks @IMarsh  Everthing is working perfectly now.

Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 5 of 6

Re: Upload files for analysis using SFTP

Jump to solution

We have written a Windows C# tool ATDUPLOADER which lets you SCAN a DIRECTORY recursive for FIles (EXE/DLL/ZIP/RAR) and upload to the ATD Appliance. It even unpacks MSI files, Archives etc. and does then upload each file.

 

We use thatt o automate the file check possiblty and pre feed files to the ATD/TIE before we roll out software at enterprise level.

Interested?

 

Greetings from switzterland

Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 6 of 6

Re: Upload files for analysis using SFTP

Jump to solution

Is it open-source?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community