...
| draw.io Diagram |
|---|
| border | true |
|---|
| |
|---|
| diagramName | C2 Protocol |
|---|
| simpleViewer | false |
|---|
| width | 600 |
|---|
| links | auto |
|---|
| tbstyle | hidden |
|---|
| diagramDisplayName | |
|---|
| lbox | true |
|---|
| diagramWidth | 411 |
|---|
| revision | 4 |
|---|
|
C2 Operations
Agents are controlled via operation (and operand) combinations sent in the heartbeat responses.
C2 Agent → C2 Server
| Operation Name | Description |
|---|
| HEARTBEAT | Heartbeat provides status and operational capabilities to C2 server(s) |
| ACKNOWLEDGE | Used by MiNiFi C2 agents to acknowledge the receipt and execution of a C2 server requested operation |
C2 Server → C2 Agent
| Operation Name | Description |
|---|
| DESCRIBE | Requesting additional information from the agent |
| UPDATE | Initiating update on the agent side (flow, configuration, asset, properties...) |
