Test Actions

Execute forensic validation tests to verify artifacts and system states.

Available Actions

Overview

Test actions execute validation tests defined in the playbook’s tests section. Tests use specialized functions to verify:

  • File existence and content

  • Registry keys and values (Windows)

  • Process and service states (Linux)

  • JSON, XML, CSV data validation

  • Database queries (SQLite)

  • Timestamps and metadata

See Test Functions for comprehensive test function documentation.