After your device is connected, you can perform a test to see Expel in action in your environment.
Create a temporary Google Cloud Platform (GCP) project and we'll produce an incident as if it were malicious activity. You don’t have to put anything in the project.
There's nothing inherently malicious in creating a GCP project; this is just an easy way to simulate how Expel responds to actual malicious events.
To create a test alert:
-
Go to the GCP Cloud Resource Manager.
-
Select Create Project.
-
Give the project an ID that starts with
expeltestproject. Project names in GCP must be globally unique, so try something like expeltestproject-x8yf92f, but vary the characters at the end. -
Fill in the billing account, organization, and a location that makes sense.
-
Select Create.
Within 10-15 minutes, you get an email from soc@expel.io with the subject line "Findings ready for review".
-
Select the link in that notification to see the findings report.
Note
You can shut down the project immediately after creating it.