Sample files to trigger events/tasks/policies

[BobLongworth 0]

Apologies if I've missed something obvious...

I know there are sample files such as the one provide via EICAR, however in terms of testing triggers events/tasks/policies in the ERA it would be handy if there were a range of sample files which could be used to safely initiate triggers.

What I'd like to be able to achieve is when a Filecoder detection is detected add the device to a dynamic group which triggers an isolate the device from the network event. However this is a little difficult to test without putting oneself at risk or waiting for someone to become infected.

It would be nice for different sample files, or better yet to generate your own via the ERA for a specific event, so if there was a need to test a specific scenario then this could easily and quickly be done in a test environment.