4 ms·
Currently we have a map of discovered nodes inside the network, and an auto-install and auto-penetrate feature, which is meant for batch installing a lot of nod
by cookiengineer 3y ago
Currently we have a map of discovered nodes inside the network, and an auto-install and auto-penetrate feature, which is meant for batch installing a lot of nodes with the agent.
The agent itself is also able to spread itself to different architectures and operating systems once a single system is installed, depending on the selected aggressiveness after the discovery phase for the surrounding network.
There's also a prototype that's trying to use a bunch of RCEs to "conquer back" lost nodes, and to reinstall the tholian guard on those systems even when the hacker got (temporary) administrative rights and locked the "old agent" out or managed to delete it.
From a legal standpoint this has to be separate product, where companies and their assets/systems/networks have to be manually vetted before they're able to use that feature, but I think you know where I'm getting at with the idea.
- alephnerd 3y agoDon't get me wrong. Your architecture is solid, but managing agents becomes a very political issue internally due to conflicting responsibilities between teams