CrowdStrike / detection-container

https://quay.io/repository/crowdstrike/detection-container
The Unlicense
39 stars 20 forks source link

Use 64bit version of sample malware #6

Closed isimluk closed 3 years ago

isimluk commented 3 years ago

GCOS based kubernetes runtime does not support 32bit binaries.

redhatrises commented 3 years ago

Should we be able to do both instead of just running a 64bit binary?

isimluk commented 3 years ago

Do we expect anyone demoing on 32bit system?

isimluk commented 3 years ago

Maybe we can detect that, but possibly our time is better spent on arm64 vs i386?

redhatrises commented 3 years ago

Maybe we can detect that, but possibly our time is better spent on arm64 vs i386?

was thinking of a simple if-else statement.... that's all.

isimluk commented 3 years ago

Alright. Added the if-else statement. Re-tested. Hopeful it helps.

redhatrises commented 3 years ago

Thanks! Ack

isimluk commented 3 years ago

@shawndwells, can I please line up for merge rights here? Pretty please. 🙏

shawndwells commented 3 years ago

Added @CrowdStrike/solution-architects so y'all have merge rights

shawndwells commented 3 years ago

merging this per @redhatrises' ack

isimluk commented 3 years ago

Thank You!