-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Requirement for live agent #38
Conversation
@kaylakraines The linked repo is private - it would be better to link to the PR to CTID's AEL once you've created it. It also looks like there's still one failing check with python 3.7 |
Kudos, SonarCloud Quality Gate passed! 0 Bugs No Coverage information |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the update!
Description
This PR provides a new requirement to only run an ability if the agent paw referenced in the ability matches a currently live agent.
This feature was developed to enable the Turla port to only run an ability if the implant that will be tasked in that ability is actively beaconing in to the server.
This PR is associated with center-for-threat-informed-defense/adversary_emulation_library#151
Type of change
How Has This Been Tested?
Tested on both the
Turla (Snake)
&Turla (Carbon)
adversaries. Observed abilities running if the required implant/agent was listed as a live agents, and not running if it was not listed as a live agent.Checklist: