Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

 The clear operation uses name of connection or repositories to clear either the connections or the repositories. In the case of a connection the content contains the operation arguments, in which the value defines the connection name to clear. 

Advanced Tables - JSON Table
outputwiki
{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"clear",
"operationid" : "string",

...


"name": 

...

"connection",
"content" : [

...


{ 

...

"unique map 

...

id" : 

...

"connection 

...

name" }

...


]
}

]

}
Advanced Tables - JSON Table
outputwiki

                    ]
                  }
 
   ]
 
  }

...

{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"clear",
"operationid" : "string",

...


"name": 

...

"repositories",
"content" : [

...


{ }

...

                    ]
                  }
 
   ]
 

...


]
}

]

}

 
Update
 
Update allows the C2 server to update either the c2 agent or provide a URI from which we download the new flow configuration through a GET request. 
 

Advanced Tables - JSON Table
outputwiki
{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"update",
"operationid" : "string",

...


"name": 

...

"configuration",
"content" : [

...


{ 

...

"location" : 

...

"HTTP or HTTPS 

...

URL" }

...


]
}

]

}

 
 

Advanced Tables - JSON Table
outputwiki
heading2

                    ]
                  }
 
   ]
 
  }
 

...

{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"update",
"operationid" : "string",

...


"name": 

...

"c2",
"content" : [

...


{ 

...

                    ]
                  }
 
   ]
 

...

"option_name" : "option_value" }
]
}
]
}

 
Start
 Start starts a previously stopped command. If a start is called on a component that is already started, nothing should occur other than an acknowledgement. Name defines the component to start. 
 

Advanced Tables - JSON Table
outputwiki
heading2
footing5
{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"start",
"operationid" : "string",

...


"name": 

...

"component 

...

name",
"content" : [

...


{ }

...


]
}

]

} 


                    ]
                  }
 
   ]
 
  }
 
 
 
 
 
Stop
 Stop stops a component that is started. Components can be the FlowController, processors, or RPGs
 

Advanced Tables - JSON Table
outputwiki
{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"stop",
"operationid" : "string",

...


"name": 

...

"component 

...

name",
"content" : [

...


{ }

...

                    ]
                  }
 
   ]
 

...


]
}

]

}

 
Restart
  Attempts to restart the component defined within name 

Advanced Tables - JSON Table
outputwiki
{"operation" : "heartbeat",

...


"requested_operations": [

...

 {

...


"operation" : 

...

"restart",
"operationid" : "string",

...


"name": 

...

"component 

...

name",
"content" : [

...


{ }

...

                    ]
                  }
 
   ]
 

...


]
}

]

}
 

 

 

 

Acknowledgements.

 Acknowledgements occur through a separate URL. This URL will receive a POST that contains the following payload, which acknowledges that the operation ID was received and executed.

Advanced Tables - JSON Table
outputwiki
{"operation": "acknowledge",

...


"operationid" 

...

: "string" 

...


}

...