| Option | Description |
|---|---|
| Name | Enter a meaningful name for the audit definition. |
| Description | Provide a more detailed description for the audit definition. This field is optional. |
| Hacktor | Select a Hacktor that should attack the selected target systems. Please note: The host on which Hacktor is installed must be able to communicate with the selected target systems. Check your firewall settings if necessary and create a whitelist entry for Hacktor in the Intrusion Detection System (IDS). :computer-mouse: Click the Hacktor field to expand a list of all available Hacktors, and select a Hacktor. Alternatively, use the free-text input to find a Hacktor in the list more quickly. |
| Target Groups | Select the target groups that should be attacked by the selected Hacktor. :computer-mouse: Click the Target Groups field to expand a list of all available target groups, and select one or more target groups. Alternatively, use the free-text input to find target groups in the list more quickly. |
| Auth-Providers | Select custom authentication providers that provide access to password-protected systems. :computer-mouse: Click the Auth-Providers field to expand a list of all available authentication providers, and select one or more providers from the list. Alternatively, use the free-text input to find providers in the list more quickly. |
| Option | Description |
|---|---|
| Time Zone | Define the time zone that you want to use for the selected time interval. :computer-mouse: Click the Time Zone field to expand a list of all available time zones, and select a time zone. |
| Cron Expression (Vixie/Unix) | Shows the defined interval as a cron expression. The cron expression is updated automatically whenever you configure a time interval manually. :computer-mouse: Click the Cron Expression field to edit the cron expression manually. |
| Next Execution (Local Time Zone) | Shows the exact date and time of the next execution in your browser’s local time zone. |
| Description | Shows the defined interval for recurring execution as a plain-language description. |
| Time Interval Selection | Define a custom execution interval.
|
| Option | Description |
|---|---|
| Type | Define the file format in which the audit report should be sent. The following options are available:
|
| Allowed Members | Define which team members should receive the audit report by email. :computer-mouse: Click the Allowed Members field to expand a list of all available users. :computer-mouse: Click the Remove icon :circle-xmark: next to an added user to remove them from the Allowed Members field. |
| Password | Enter the password recipients must use to open the encrypted audit report. This field is optional. Please note: If you do not enter a password, the document is sent without encryption. However, we strongly recommend that you send the document in encrypted form. |
| Option | Description |
|---|---|
| Run Bruteforce | Allow passwords to be tested automatically during the penetration test to assess access to user accounts and search for additional vulnerabilities as an authenticated user. |
| Include Default Password List for Bruteforce Attacks | Allow a predefined default password list to be tested during the penetration test in addition to the custom password list. The custom password list is prioritized during the assessment. |
| Run BSI Check | Allow SSL/TLS encryption to be assessed during the penetration test based on the BSI TR-03116-4 checklist. |
| Run UDP Based Default Discoveries (DNS, mDNS, SNMP) | Allow checks to be performed during the penetration test that are only possible using the User Datagram Protocol (UDP). This applies, for example, when assessing Domain Name System (DNS) server connections or using network protocols such as Multicast DNS (mDNS) or the Simple Network Management Protocol (SNMP). Please note: In rare cases, these checks can cause increased network load or even temporary unavailability. |
| Include Printers | Allow printers and scanners to be assessed for vulnerabilities during the penetration test. Please note: Enabling this option can cause configuration changes on the printer or unintended printouts. |
| Run Certificate Validation | Allow the validity of SSL/TLS certificates to be checked during the penetration test. Please note: When scanning internal networks, certificate validation can generate warnings that do not necessarily require action in this context. |
| Execute Custom Scripts | Allow custom scripts stored on the selected Hacktor to be executed during the penetration test. Please note: Enabling this option has no effect if no custom scripts are stored on the selected Hacktor. |
| Reverse DNS Lookup | Allow reverse DNS (rDNS) lookups to be performed during the penetration test to resolve IP addresses to host names. Please note: In larger networks or when multiple host names are associated with one IP address, redundant scans can occur and increase the duration of the audit. |
