Opsec & MITRE Tracking

Toolboxes page

  • The toolboxes page allows TeamLead users to set the Opsec status of a command.

  • Options are

    • Low

    • Moderate

    • High

    • RequiresLeadAuthorization

    • Blocked

  • RequiresLeadAuthorization is not yet implemented, but once it is it will cause a popup when an operator runs a command with this opsec level requiring a TeamLead user to approve the command use.

  • The page also tries to give info on possible Mitre ATT&CK mapping of the commands built into the implant

Last updated