Running the Email Attack Scenario

Enable Email Sensor on one testing email account, and then run the simulation test to trigger detections in Trend Vision One.

1. Enable Email Sensor on an Exchange Online email account.
   1. Go to Email Security Operations > Email Account Inventory.
   2. Grant permission to access your Exchange Online mailboxes on the Exchange Online tab.
   3. Enable Email Sensor on an email account.
2. In the Trend Vision One console, open Resource Center by clicking the Resource Center () icon in the lower-left corner.
3. Click Simulations.
4. Select the app that you want to test.

   The selected app appears and displays information about the simulations feature and the selected app.

5. Click Try Simulations and select the scenario that you want to test.

   The Simulations dialog appears and displays information about the selected simulation.

6. Create an email with the following information using an external mailbox.

   • Subject: Email Demo

   • Body: hxxps://ca21-3.winshipway.com/mx-01-006

     Note:

     Replace “xx” in the URL with “tt”.

7. Send the email to the testing email account.
8. After sending the email, go to the Trend Vision One console to view the expected results.
   Note:

   Results may take a few minutes to appear.