> For the complete documentation index, see [llms.txt](https://docs.reveald.com/technical-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.reveald.com/technical-documentation/admin-guides/epiphany-validation-engine-users-guide/chapter-3-eve-platform/navigation-tabs/emulation-control/incursion/create-a-new-emulation-using-incursion.md).

# Create a New Emulation Using Incursion

This option allows the user to create a new Malware/samples Emulation-on demand in a simpler path. To create a new Emulation using Incursion, follow these steps: 

1. Selecting the Incursion tab will display an Emulation Wizard. 
2. An Emulation creation wizard will open. 
3. Select the type of emulation to be configured. 

* <mark style="color:purple;">Now:</mark> Performs on Demand emulation&#x20;
* <mark style="color:purple;">Scheduled:</mark> Configures an Emulation to be sent later (scheduled). If the user select this option, the Date and Time parameter will be displayed. Set the details of the Emulation in this section.&#x20;

4. Click on <mark style="color:orange;">“Next”</mark> to continue.&#x20;
5. Select the package(s) the user want to include in the Emulation. Use the buttons to navigate between the package categories. See Package Categories.&#x20;

Use the search bar to filter the packages.&#x20;

6. Click on <mark style="color:orange;">“Next”</mark> to continue or in <mark style="color:orange;">“Back”</mark>  to return to the Type window.&#x20;
7. Select the vector to be confirmed. Real Emulation is displayed by default. Move the bar to the EPP or Network Security vectors if the user want to perform the emulation to those vectors.&#x20;
8. In the same window, the user can change the default times for each of the Vectors of the Emulation. Click on the option <mark style="color:orange;">“Default Time”</mark> to deactivate the default times. Three new fields will appear where the user must set in seconds the preferred time for each vector.
9. Click on <mark style="color:orange;">“Next”</mark> to continue or in <mark style="color:orange;">“Back”</mark> to return to the Package window.&#x20;
10. Select the Endpoints to which the user want to send the Emulation.&#x20;
11. Click on <mark style="color:orange;">“Next”</mark> to continue or in <mark style="color:orange;">“Back”</mark> to return to the Vector window.&#x20;
12. By default, a generic name for the Emulation is displayed. Including the word Incursion followed by the date and time at which the Emulation configuration is being performed.&#x20;

    The user can remove that name and set a new one.&#x20;
13. Click on <mark style="color:orange;">“Next”</mark> to continue or in <mark style="color:orange;">“Back”</mark> to return to the Endpoints window.&#x20;
14. If I set up an On Demand emulation, click on the button <mark style="color:orange;">“Execute”</mark> to send the emulation at that time. The user will be redirected to the On Demand Emulations table in the Emulations tab.&#x20;

    If the user have configured a scheduled Emulation, click on <mark style="color:orange;">“Scheduled”</mark> to schedule the Emulation. The user can find the scheduled Emulation in the Scheduled Emulations Table section of the Emulations Tab.&#x20;


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.reveald.com/technical-documentation/admin-guides/epiphany-validation-engine-users-guide/chapter-3-eve-platform/navigation-tabs/emulation-control/incursion/create-a-new-emulation-using-incursion.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.