Enrich your strategic dashboards with cybersecurity performance scores and critical KPIs
Relaunch the simulation based on a previous campaign for control. Replay all events while keeping the target perimeter unchanged.
- Track the progression of your Mean Time to Detect and Respond (MTTD/R)
- Detect failures in the detection chain: log loss, alert interruption, etc.
- Measure benefits from new detection rules or tools deployed
1) Evaluate the previously executed simulation for benchmark
Once a simulation is Completed and detection data is fulfilled (detection source, date & time, and evidence if you choose), you receive actionable results to measure the effectiveness of your defenses. Your simulation score provides an evaluation of this performance.
Add a caption...
2) Create a new simulation to relaunch events
Configure the replay of events using the "Create simulation" button.
This sketch cannot currently be displayed in exports
Adjust the parameters of the new simulation according to your needs. These settings are similar to those for creating a campaign:
Select an Attack Vector. A connection test to each Target Systems will be performed.
Configure the triggering and chaining modalities
Add a caption...
If all is good, click on Launch or Plan to check it.
The number of simulations allowed per campaign depends on your subscription.
3) Provide the detection information for executed events
Just like the previous simulation of the campaign, adjust the detection status and enhance it with the detection source, date & time, and evidence.
This sketch cannot currently be displayed in exports
4) Measure the evolution of your defenses
From the new simulation, results are compared with the previous one, showing percentage changes to indicate the evolution of each measure, as shown below. Scores, graphs, and KPIs are updated in real-time based on the provided data.
This sketch cannot currently be displayed in exports
This sketch cannot currently be displayed in exports
Hint: A campaign comprises several simulations, replaying tests precisely as they were conducted to assess detection evolution against the same scenario. The most recently executed simulation is selected by default upon entering a campaign. All tabs (Synthesis, Execution, Timeline, ATT&CK matrix) utilize data from this simulation. If you wish to select a different simulation, please use the Simulation list located at the top of the screen.