BRO - Ransomware script (fox-it)

Hi

How can I check that the script is working ?

Any idea where I can find PCAP with malicious SMB activity ?

Thanks