Create a New Emulation Using Incursion

This option allows the user to create a new Malware/samples Emulation-on demand in a simpler path. To create a new Emulation using Incursion, follow these steps:

1. Selecting the Incursion tab will display an Emulation Wizard.

2. An Emulation creation wizard will open.

3. Select the type of emulation to be configured.

• Now: Performs on Demand emulation

• Scheduled: Configures an Emulation to be sent later (scheduled). If the user select this option, the Date and Time parameter will be displayed. Set the details of the Emulation in this section.

1. Click on “Next” to continue.

2. Select the package(s) the user want to include in the Emulation. Use the buttons to navigate between the package categories. See Package Categories.

Use the search bar to filter the packages.

1. Click on “Next” to continue or in “Back” to return to the Type window.

2. Select the vector to be confirmed. Real Emulation is displayed by default. Move the bar to the EPP or Network Security vectors if the user want to perform the emulation to those vectors.

3. In the same window, the user can change the default times for each of the Vectors of the Emulation. Click on the option “Default Time” to deactivate the default times. Three new fields will appear where the user must set in seconds the preferred time for each vector.

4. Click on “Next” to continue or in “Back” to return to the Package window.

5. Select the Endpoints to which the user want to send the Emulation.

6. Click on “Next” to continue or in “Back” to return to the Vector window.

7. By default, a generic name for the Emulation is displayed. Including the word Incursion followed by the date and time at which the Emulation configuration is being performed.

   The user can remove that name and set a new one.

8. Click on “Next” to continue or in “Back” to return to the Endpoints window.

9. If I set up an On Demand emulation, click on the button “Execute” to send the emulation at that time. The user will be redirected to the On Demand Emulations table in the Emulations tab.

   If the user have configured a scheduled Emulation, click on “Scheduled” to schedule the Emulation. The user can find the scheduled Emulation in the Scheduled Emulations Table section of the Emulations Tab.