...
Operation Name | Description | operand/name | content/args |
---|---|---|---|
ACKNOWLEDGE | Operation used by MiNiFi C2 agents to acknowledge the receipt and execution of a C2 server requested operation | N/A | |
CLEAR | Clear repositories | repositories | N/A |
CLEAR | Clears the connection queues | connection | connection1=<connection name>, connection2=<connection 2> ... Will also accept a list <connection name1>,<connection name2>, ... |
CLEAR | Clears component state | corecomponentstate | corecomponent1=<component name>, corecomponent2=<component 2> ... |
DESCRIBE | Return metrics | metrics | metricsClass=<metric class to obtain> |
DESCRIBE | Return configuration options | configuration | N/A |
DESCRIBE | Return agent manifest | manifest | N/A |
DESCRIBE | Return backtraces from the state monitor | jstack | N/A |
DESCRIBE | Return all core component states | corecomponentstate | N/A |
HEARTBEAT | heartbeat operation – may contain embedded heartbeats. | N/A | N/A |
PAUSE | Pauses C2 agents | N/A | N/A |
RESTART | Restarts C2 agents | N/A | N/A |
RESUME | Resumes C2 agents | N/A | N/A |
START | Starts components within the C2 agents | C2 FlowController <name of component to start> | N/A |
STOP | Stops components within the C2 agent | C2 FlowController <name of component to stop> | N/A |
TRANSFER | Transfers an object between the C2 agent and C2 designator. | debug | N/A |
UPDATE | Update flow | configuration | location=<URL to updated flow file> or configuration_data=<flow file yaml content> |
UPDATE | Update configuration property | properties | propertykey1=propertyvalue1, propertykey2=propertyvalue2 ... |
UPDATE | Download an asset | asset | file="filename.txt", url="/c2/asset/6c8052a7-93ec-42d2-aa78-69217e3385a7", forceDownload=false forceDownload: If true, existing files with the same name are overwritten. If false, existing files are not downloaded again. |
...