wehub-resource-sync
4.5 KiB
@redeye/parser-core / ParserBeacon
Interface: ParserBeacon
Table of contents
Properties
Properties
endTime
• Optional endTime: Date
The date time the beacon ran it's last command or was terminated
Example
endTime = new Date('2021-01-01T00:00:00.000Z');
Defined in
files
• Optional files: ParserFile[]
A list of files that the beacon has uploaded or downloaded
Example
files = [
{
filePath: 'local/path/to/file.txt',
fileName: 'admin-list.txt',
dateTime: new Date("2021-01-01T00:00:00.000Z"),
md5: '1234567890abcdef1234567890abcdef',
fileFlag: 'UPLOAD'
// or
fileFlag: 'DOWNLOAD'
}
]
Defined in
host
• host: string
The name of the host that this beacon is running on This should match the name of a host in the hosts object
Example
host = 'DESKTOP-12345';
Defined in
images
• Optional images: ParserImage[]
A list of images that the beacon has downloaded
Example
images = [
{
fileType: 'png',
filePath: 'local/path/to/image.png',
fileName: 'host-desktop-screenshot.png',
},
];
Defined in
ip
• Optional ip: string
The IP address of the host as reported by the beacon
Example
ip = '192.168.23.3';
Defined in
name
• name: string
The name of the beacon
Defined in
port
• Optional port: number
The port that the beacon is communicating over
Example
// http
port = 80;
// https
port = 443;
Defined in
process
• Optional process: string
The process name of the beacon
Example
process = 'explorer.exe';
Defined in
processId
• Optional processId: number
The process identifier of the beacon
Example
pid = 1234;
Defined in
server
• server: string
The name of the server that spawned this beacon This should match the name of a server in the servers object
Defined in
startTime
• Optional startTime: Date
The date time the beacon was initialized or ran it's first command
Example
startTime = new Date('2021-01-01T00:00:00.000Z');
Defined in
type
• Optional type: "http" | "https" | "smb" | "dns"
The type of beacon
Example
possible values: 'http' | 'https' | 'smb' | 'dns'
type = 'http'