Exercise 015–10 minutesNothing is sent
Planning
Write an exercise plan.
Pick three inputs, then read the draft as if you were the person approving the test. Replace every example with the real rules of engagement before using it.
Draft plan
Check a detection: Endpoint telemetry
- Question
- Does the test activity reach the responder with the actor, target and time intact?
- In scope
- one named test endpoint, one harmless marker and the agreed telemetry route.
- Baseline
- Run the known-good or expected-denial case first. Keep its actor, timestamp and result.
- Test action
- perform one harmless action against a researcher-created object and remove the marker afterwards.
- Final check
- Find the marker in the responder’s queue and compare it with the source event.
- Budget
- 2 owned actors · 1 owned object · 4 requests · 1 reversible write · immediate cleanup.
- Stop
- Stop if the endpoint slows or fails, the marker leaves the test route, or unrelated sensitive records appear.
- Limit
- Report only what this actor, object and observation route show. List the branches that were not tested.
This is a drafting aid. Replace the examples with the signed rules of engagement and confirm who owns every test account and object.