Infection Monkey

monkey island → attack config → run

Run Infection Monkey (Guardicore's auto-pentest) on the test environment, validating propagation and detection of the simulated compromise.

Run it in the purple team lab when you want validation with auto-pentest: Infection Monkey (from Guardicore/Akamai) deploys agents (the monkeys) that propagate the simulated compromise — lateral movement techniques, credentials, exploits — and Monkey Island (the console) reports propagation and 'infection' of the environment. It's the auto-pentest tool: simulated propagation measures the environment's resilience (what an attacker would reach) and validates movement detection. In purple teaming, Infection Monkey complements validation: simulated propagation and island findings (routes, reached systems).

Don't run it outside the lab: monkeys propagate the simulated compromise (real exploits and lateral movement) — the isolated test environment is the place, and the experiment's blast radius is controlled (monkey segments). And note: Infection Monkey is a propagation simulation — it doesn't validate detection of individual techniques with Atomic/Prelude granularity; it measures propagation scope. Deployment (monkeys on hosts, the island) is the requirement. Island findings (reached systems) are interpreted: achieved propagation is the segmentation gap.