Description

When an agent successfully propagates to another host, a PropagationEvent should be created and published.

Tasks

Propagation event

• Define a new PropagationEvent in common.events (0d) @ilija-lazoroski
• Define a new ExploitationEvent in common.events (0d) @ilija-lazoroski
• Modify all exploiters to publish PropagationEvent and ExploitationEvent with the new information (0d) @ilija-lazoroski @cakekoa
  • HostExploiter @ilija-lazoroski
  • SSH @ilija-lazoroski
  • Log4Shell @ilija-lazoroski
  • Hadoop @ilija-lazoroski
  • Zerologon @ilija-lazoroski
  • MSSQL @cakekoa
  • PowerShell @cakekoa
  • SMB @cakekoa
  • WMI @ilija-lazoroski
• Update nodes on exploitation events (communication type) (0d) @mssalvatore
• Update report generation, or update reports to use IEventRepository instead of ExpliotTelem or VictimHost or whatever they're using (0d) @cakekoa
• Create a new agent event subscriber that replaces ExploitInterceptingTelemetryMessenger (0d) @mssalvatore
  • Remove ExploitInterceptingTelemetryMessenger
• Remove ExploitTelem (0d) @cakekoa
• Modify BB tests to use /api/agents and /api/machines to determine if machines communicated back (0d) @cakekoa
• Remove MonkeyIslandClient.find_monkeys_in_db() and the corresponding API endpoint. (0d) @cakekoa