cancel
Showing results for 
Search instead for 
Did you mean: 

Test File for MAR Threat Workspace

Jump to solution

Hi All,

Anyone to have a test file (malware maybe or a script) that can trigger a detection in the MAR MAR Threat Workspace?

BR,

G.A.

Labels (3)
Tags (3)
1 Solution

Accepted Solutions
Highlighted
McAfee Employee rgc
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Test File for MAR Threat Workspace

Jump to solution

There is a very simplest method where you can create a sample file for testing the file as "UNKNOWN". 

Follow these steps to create an unknown file reputation  

1. Install 7.zip as a program. 
2. Create a text file example: RGC.txt 
3. Add some text into it and save it, so it isn't blank. 
4. Right-click on the file, & expand 7.zip & add to the archive. 
5. In the archive section, click the Create SFX archive & hit ok & save it. 
6. Go to the newly created .exe & run it, & extract it. 
7. From Agent Monitor click on Collect & send props & Send events 
8. Check TIE Reputations page to see the file shows as UNKNOWN.


Raghavendra GC
McAfee Technical Support – APAC
Customer Success Group
www.mcafee.com
2 Replies
Highlighted
McAfee Employee rgc
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Test File for MAR Threat Workspace

Jump to solution

There is a very simplest method where you can create a sample file for testing the file as "UNKNOWN". 

Follow these steps to create an unknown file reputation  

1. Install 7.zip as a program. 
2. Create a text file example: RGC.txt 
3. Add some text into it and save it, so it isn't blank. 
4. Right-click on the file, & expand 7.zip & add to the archive. 
5. In the archive section, click the Create SFX archive & hit ok & save it. 
6. Go to the newly created .exe & run it, & extract it. 
7. From Agent Monitor click on Collect & send props & Send events 
8. Check TIE Reputations page to see the file shows as UNKNOWN.


Raghavendra GC
McAfee Technical Support – APAC
Customer Success Group
www.mcafee.com

Re: Test File for MAR Threat Workspace

Jump to solution

Thanks, .

Your suggestions is working.