Solved

Drift Analysis

  • 31 January 2022
  • 1 reply
  • 113 views

Badge

How can I use Cymulate to monitor changes or drift of security controls from a known good state. I know I could run scenarios on a schedule, is there a way to get an alert or view a report if my endpoint control misses say a ransomware test?

icon

Best answer by Cymulate_CharlesRoberts 1 February 2022, 14:57

View original

1 reply

Userlevel 1
Badge +1

Scott,

The Alerts/Notifications configuration can be found in the following location.

  1. Navigate to the dropdown in the upper right hand side of the screen.
  2. Click on User Management
  3. On the right hand side of the screen you will see “Click to configure email preference.”

In this panel you will see a series of notifications in which you can configure. Including the specific use case you called out around Ransomware scenarios.

 

That being said, ensuring you have the appropriate baseline set and ensuring you are deviating from expectations will supplement this information. You can see how to set a baseline in THIS article.

 

Reply