How to test if Advanced EDR/EPDR protection is querying the cloud
Related Products_
- Cytomic EPDR
- Cytomic EDR
Introduction_
Advanced EDR/EPDR has developed a tool called Panda Cloud Test File to allow testers and users verify whether their Advanced EDR/EPDR product can successfully connect to the Collective Intelligence cloud-scanning servers. In this article, you can find Panda Cloud Test File for Windows Panda Cloud Test File for macOS and Panda Cloud Test File for Linux.
Steps to test the connection in Windows systems
- Download the test file PandaCloudTestFile.exe.
- If the file is detected as a virus, the connection is working properly. Otherwise, it means the protection is not connecting to Panda cloud-scanning servers because the file is only detected by the Collective Intelligence.
DISCLAIMER: This file is *not malicious*. If it is detected, it simply means your Advanced EDR/EPDR product is connecting correctly to the Collective Intelligence cloud-scanning servers.
Steps to test the connection in Linux systems
- Download the PandaCloudTestFileELF.zip tool.
- Unzip the file in the computer where you want to test the connection (password panda).
- If it works correctly, the unzipped file will be removed and sent to quarantine.
Steps to test the connection in macOS systems
- Download the pandacloudtestfileosx.zip tool.
- Unzip the file in the computer where you want to test the connection (password panda).
- If it works correctly, the unzipped file will be removed and sent to quarantine.
Why do we use Cloud-based analysis?
Former signature-based technologies have proven to be inefficient when managing current malware threats. Moreover, the exponentially increasing size of the local database impacts the performance in most of the operating systems, in particular, macOS, significantly.
Consequently, Advanced EDR/EPDR relies on the Cloud for the analysis of potential malicious files such as binaries, scripts, executables, etc. This excludes some traditional text/signature based files such as eicar, though. For testing purposes, Advanced EDR/EPDR suggests the use of the Panda Cloud Test File tool, whose internal structure is not a text-based file, but an executable file in the case of Windows, macOS and a binary file in the case of Linux.
