Is it possible to test detection alerts within ePO?

[Former Member]

It's difficult to modify the endpoint, so I'd like to test the Automatic Responses configurations from the ePO console, like testing the alert email function.

Is it possible without actually dropping an EICAR file on the endpoint? 

[Hem]

Yes, you can test SMTP connectivity using 'Test email'. in ePO server server settings->email server.

[Former Member]

Thanks, that's the alert email test function I did find. However I would like to verify the alert parameter itself, such as; Infected file deleted, Infected item found, MBR Virus found, Memory infected, etc...without actually having to infect the endpoint.

[cdinet · Accepted solution]

Without dropping eicar, you can set up an automatic test response for an access protection violation and then break that rule to trigger a response, but not sure if that would satisfy your testing since it is access protection vs a virus detection. What is the problem with using eicar?