Creating a new Custom Threat Emulation
To create a new Custom Threat Emulation:
In the Custom Threat tab, at the top center, click on Emulations.
The Custom Threat Validation Table changes to the Emulations View.
The top right button will also change. Click on “New Emulation”.
A wizard will be prompted. Supply a Name and Description (Mandatory) and then click “Next”.
Select the Endpoint targets. If no endpoints are online, the user can still configure the emulation to send it later. Click “Next” to continue.
Select the script to send in the emulation. The user can select multiple scripts on one single emulation.
Use the “Search name...” field to find the scripts or use the pagination at the button.
Click “Next” to continue.
Review the emulation details. Click on the “Back” button to make changes to the emulation. Click “Save” to store the emulation.
The new emulation will be added to the Custom Threat Validation Emulations Table at the top. Click “Launch” to send the emulation.
Confirm the Emulation launch clicking “Yes". The emulation will be sent to the endpoints configured.
To abort the emulation launch, click on the “No" button.
Last updated