Stage Operator networking fact file

/static/assets/windows-logo.svg
Place a PowerShell file on disk that new agent can reference when launching. These facts must be declared in Operator before running this procedure and each fact must contain Operator's routable IP address and relevent contact port. For example, '#{operator.public.http}' should map to a value such as 'http://10.0.0.2:3391'.
locked
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.

Login

Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
Is my host protected against APT37?

2022-12-19

/static/assets/windows-logo.svg
Stage and execute APT37.
APT40 defense industry

2022-04-12

/static/assets/windows-logo.svg
Emulating APT40's multi-stage macro-enabled documents.