Is This Thing On?

## Executive Summary This BHIS blog post provides step-by-step, non-malicious methods for testing antivirus and in-memory detection on sensitive systems — using the EICAR test file (saved with various extensions), storing EICAR in NTFS Alternate Data Streams, running the AMSI test string in PowerShell, and simulating behavior-based detection by creating an LSASS memory dump — intended as defensive guidance for administrators rather than a report of an incident.