New Tests - December
This months implemented test:
Test requirements
- Can be done from a single computer
- We can expect to get similar results on similar systems in the organization.
- Does not need special software or hardware
Check Intrusion Detection/Prevention is ON and reporting
CIS 8: Malware Defenses
From: Brian
Implemented in platform: 
This is a very crude test of IDS, and I hope you can create a better test. But for what it’s worth this little test checks if the IDS is listening and reporting.
Manual test:
# From a computer you want to test from:
# open a cmd prompt, go to where you downloaded the file,
# then simply run:
ping -c 3 -p 2b2b2b415448300d scanme.nmap.org
# your IDS should detect this.
# Now check your SIEM and see how your security responds.
Automated - Using our platform:
We built a few hundred IDS tests that tests shell and payload traffic to simulate attack traffic.
