...
Operation Name | Description | operand/name | content/args |
---|---|---|---|
ACKNOWLEDGE | Operation used by MiNiFi C2 agents to acknowledge the receipt and execution of a C2 server requested operation | N/A | |
CLEAR | Clear repositories | repositories | N/A |
CLEAR | Clears the connection queues | connection | connection1=<connection name>, connection2=<connection 2> ...
Will also accept a list <connection name1>,<connection name2>, ... |
CONSUME | Consumes a heartbeat within an agent to avoid sending from other agents | N/A | N/A |
DESCRIBE | Return metrics | metrics | metricsClass=<metric class to obtain> |
DESCRIBE | configuration | N/A | N/A |
DESCRIBE | manifest | N/A | N/A |
DESCRIBE | policy events – Based on the defined policies | ||
EXECUTE | Executes commands per the agent's defined policies | command | arguments |
HEARTBEAT | heartbeat operation – may contain embedded heartbeats. | ||
HEARTBEAT | nonce of combined heartbeats | ||
UPDATE | Update flow | configuration | location=<URL to updated flow file> |
UPDATE | Update c2 properties | c2 | configkey1=configvalue1, configkey2=configvalue2 ... *configkey1 is a configuration option that is updated and its new value |
UPDATE | Update configuration options defined within agent policies | ||
UPDATE | Update agent | agent | location=<URL to agent binary or diff> partial=true/false ( optional) |
RESTART | Restarts C2 agents | N/A | N/A |
REPLICATE | Replicates an Agent's state to another agent; with standby true the replicant is paused and awaits restart. | agent | standby=true/false |
REPLICATE | Tells agents to replicate state to nearby agents | server | |
START | Starts components within the C2 agents | <name of component to start> | N/A |
STOP | Stops components within the C2 agent | <name of component to stop> | N/A |
SUBSCRIBE | Subscripts a C2 server to internal respondables ( Metrics , configuration, and policy/audit events ) . These will be placed into the heartbeat | enable/disable | subscribe=metrics, subscribe=configuration, subscribe=auditevents |
TRANSFER | Transfers an object between the C2 agent and C2 designator. | N/A | N/A |
...