Hello,
I would like to test the "automated actions" in which the computer is isolated at a "critical severity". What are the basic ways to test this?
As an example I would like to test this IOC: JS.Trojan.Generic_48153.ioc "This IOC fires when a URI pattern similar to this malware has been detected. The components of the URI this IOC inspects for are: "/01/Carontex"."
Is it sufficient to call a website that contains this URI to trigger the IOC?
Thanks in advance!