Opsec & MITRE Tracking

Toolboxes page

• The toolboxes page allows TeamLead users to set the Opsec status of a command.

• Options are

  • Low

  • Moderate

  • High

  • RequiresLeadAuthorization

  • Blocked

• RequiresLeadAuthorization is not yet implemented, but once it is it will cause a popup when an operator runs a command with this opsec level requiring a TeamLead user to approve the command use.

• The page also tries to give info on possible Mitre ATT&CK mapping of the commands built into the implant