Skip to content

A simple utility to generate real File and Active Directory activity in lab environments for the purposes of monitoring changes and detecting "threats"

Notifications You must be signed in to change notification settings

safai-labs/ActivitySimulator

 
 

Repository files navigation

Activity Simulator

A simple utility to generate real File and Active Directory activity for multiple user accounts in lab environments for the purposes of monitoring changes and detecting "threats".

Usage

  1. Configure a JSON Configuration File for the activity simulator - example provided in the "FileShareDemo" folder!
  2. Pick a Parent Directory (Sample Directory Included) - Ensure you have no important data in this directory - example provided in the "FileShareDemo" folder!
  3. Specify a JSON File for Configuration - From Step 1.
  4. Select Activity Types and Threatening Behaviour to Simulate
  5. Specify Domain Users to Impersonate the activity as on the "User Settings" Tab
  6. Set frequency of events with the "Activty Level" slider
  7. Click Start
  8. Utlity will then begin the activity specified by your selections. Changes will be made to the files / folders specified in step 1 and 2 so be careful!
  9. This will just run forever until you stop it!

Requires

  • .NET Framework 4.7.2
  • For domain user impersonation - you will likely need to run the application from a domain joined machine.

Todo

  • Clean up sloppy WPF
  • Implement "Threats" - "Ransomware Simulation / Risky Behaviour
  • Implement Active Directory Activity
  • Make the Account management more robust
  • Implement Better Account Management Performance

About

A simple utility to generate real File and Active Directory activity in lab environments for the purposes of monitoring changes and detecting "threats"

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C# 100.0%