Automating the training
Now that we understand how attack simulations and payloads work, it is important to understand their automation aspect, which makes for a more realistic scenario. Automation is a good way to expose users to more unexpected attacks by launching multiple payloads, and it opens the possibility of identifying gaps in training (Microsoft, 2024c).
Simulation automation
Simulation automation allows you to automate a group of simulations together and add randomization of the payloads used. The process of creating simulation automations is the same as creating a single simulation, with the following differences:
- A simulation automation is created from the Attack simulation training page, Automations tab, Simulation automations section, or via https://security.microsoft.com/attacksimulator?viewid=automations
- You can select multiple techniques to use in the simulation
- You can select multiple payloads or select Randomize to let Defender for Office...
