Opsec & MITRE Tracking
Toolboxes page
The toolboxes page allows TeamLead users to set the Opsec status of a command.
Options are
Low
Moderate
High
RequiresLeadAuthorization
Blocked
RequiresLeadAuthorization is not yet implemented, but once it is it will cause a popup when an operator runs a command with this opsec level requiring a TeamLead user to approve the command use.
The page also tries to give info on possible Mitre ATT&CK mapping of the commands built into the implant
Last updated