HOW TO GENERATE SECURITY FINDINGS TO HELP YOUR SECURITY TEAM WITH INTERNAL IR SIMULATIONS

Summary from the TLDR InfoSec newsletter

A tutorial from AWS on how to create security events for testing IR playbooks. The solution generates findings for a list of included CVEs that can be detected for GuardDuty, Inspector, or sent to a SIEM. AWS recommends that these should be run in a dedicated, sandboxed environment as a purple-teaming exercise.