I am working on integrating Mearki alerts (using webhook) with ITSM. To test the functionality I like to test each alerts and see how it reflect in ITSM. Is there any scripts/tool I can use to trigger the alerts specially udldError, malwareDetected, malwareBlocked, portCableError and rougueDHCPServer. I am able to trigger them manually it's really time consuming and I can't do it remotely.
I suppose you already know that you can trigger AMP using the EICAR samples (eicar.org).
For rogue DHCP you could just run an open source DHCP server. Tftpd comes to mind.
But you can't do that remotely indeed. Unless you can access a client remotely. And I wouldn't do the DHCP test on a production network.
Yes i was able to use EICAR to check malwereBlocked alert. Regarding DHCP I am alwaya getting newDHCPDetected not the rogueDHCP one. Not sure for which scenario rogueDHCP alerts trigger.
@FakrulAlamDA I would imagine a rogue DHCP alert would come when a subnet has a second DHCP server added onto it.