Stage Operator networking fact file

Place a PowerShell file on disk that new agent can reference when launching. These facts must be declared in Operator before running this procedure and each fact must contain Operator's routable IP address and relevent contact port. For example, '#{operator.public.http}' should map to a value such as ''.
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.


Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
Is my host protected against APT37?


Stage and execute APT37.
APT40 defense industry


Emulating APT40's multi-stage macro-enabled documents.