Once the initial simulation (also called "calibration simulation") of the campaign is complete (events executed and detection evaluation performed) you can confidently reexecute the same simulation for control purposes. You can create a Control Test to replay all the events of the campaign while keeping the target perimeter unchanged.
For each Control Test, you can provide the detection status of executed events to effectively measure the evolution of detection capabilities.
To enable the execution of Control Tests, change the campaign status to "Calibrated". This action will freeze the initially provided score and information.
Change the status of the concerned campaign using the button "Mark my campaign as calibrated." Note that the transition to Calibrated status is done only once for a campaign in progress; this step is not necessary for each Control test.
This sketch cannot currently be displayed in exports
Confirm the status change by validating the calibration.
Add a caption...
Configure the replay of events using the button "Create a new control test."
This sketch cannot currently be displayed in exports
Adjust the parameters of the Control Test according to your needs. These settings are similar to those for creating a campaign:
Assign a name to the Control Test.
Configure the triggering and chaining modalities, as well as the Attack Vector used.
View the list of events from the campaign and their detection status during the previous simulation executed.
This sketch cannot currently be displayed in exports
If all is good, click on Launch or Plan to check it.
The number of Control Tests allowed per campaign depends on your subscription.