Opsec & MITRE Tracking

Toolboxes page

  • The toolboxes page allows TeamLead users to set the Opsec status of a command.
  • Options are
    • Low
    • Moderate
    • High
    • RequiresLeadAuthorization
    • Blocked
  • RequiresLeadAuthorization is not yet implemented, but once it is it will cause a popup when an operator runs a command with this opsec level requiring a TeamLead user to approve the command use.
  • The page also tries to give info on possible Mitre ATT&CK mapping of the commands built into the implant