Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Operation NameDescriptionoperand/namecontent/args

ACKNOWLEDGE

Operation used by MiNiFi C2 agents to acknowledge the receipt and execution of a C2 server requested operation N/A
CLEARClear repositoriesrepositoriesN/A

CLEAR

Clears the connection queuesconnection

connection1=<connection name>, connection2=<connection 2>  ...

 

Will also accept a list

<connection name1>,<connection name2>, ...

CONSUMEConsumes a heartbeat within an agent to avoid sending from other agentsN/AN/A

DESCRIBE

Return metricsmetricsmetricsClass=<metric class to obtain>
DESCRIBEconfigurationN/AN/A
DESCRIBEmanifestN/AN/A
DESCRIBEpolicy events – Based on the defined policies

EXECUTEExecutes commands per the agent's defined policiescommandarguments
HEARTBEATheartbeat operation – may contain embedded heartbeats.

HEARTBEATnonce of combined heartbeats

UPDATE

Update flowconfigurationlocation=<URL to updated flow file>
UPDATEUpdate c2 propertiesc2

configkey1=configvalue1, configkey2=configvalue2 ...

*configkey1 is a configuration option that is updated and its new value

UPDATEUpdate configuration options defined within agent policies

UPDATEUpdate agentagent

location=<URL to agent binary or diff>

partial=true/false ( optional)

RESTART

Restarts C2 agentsN/AN/A

START

Starts components within the C2 agents<name of component to start>N/A
STOPStops components within the C2 agent<name of component to stop>N/A
SUBSCRIBE

Subscripts a C2 server to internal respondables ( Metrics , configuration, and policy/audit events ) .

These will be placed into the heartbeat

enable/disablesubscribe=metrics, subscribe=configuration, subscribe=auditevents
TRANSFERTransfers an object between the C2 agent and C2 designator.N/AN/A

...