New Tests - November
This months implemented test:
Test requirements
- Can be done from a single computer
- We can expect to get similar results on similar systems in the organization.
- Does not need special software or hardware
Check antivirus is ON and reporting
CIS 8: Malware Defenses
From: Brian
Implemented in platform:
Run Eicar. It’s a test virus, and doesn’t harm your computer. I let helpdesk run it on multiple endpoints and then see if it’s alerted in our central AV system. I also use it to see if my SIEM picks up the alert, and that security team responds. Simply download eicar here: https://secure.eicar.org/eicar.com
Manual test:
# From a computer you want to test from:
# open a cmd prompt, go to where you downloaded the file,
# then simply run:
eicar.com
# your antivirus should detect this.
# Now check your SIEM and see how your security responds.