package eldritch

Get desktop application:
View/edit binary Protocol Buffers messages

Credential reported on the host system.

Used in: c2.ReportCredentialRequest

• string principal = 1

• string secret = 2

• Credential.Kind kind = 3

Used in: Credential

• KIND_UNSPECIFIED = 0

• KIND_PASSWORD = 1

• KIND_SSH_KEY = 2

File on the host system.

Used in: c2.ReportFileRequest

• optional FileMetadata metadata = 1

• bytes chunk = 2

FileMetadata about a file on the host system.

Used in: File

• string path = 1

• string owner = 2

• string group = 3

• string permissions = 4

• uint64 size = 5

• string sha3_256_hash = 6

Process running on the host system.

Used in: ProcessList

• uint64 pid = 1

• uint64 ppid = 2

• string name = 3

• string principal = 4

• string path = 5

• string cmd = 6

• string env = 7

• string cwd = 8

• Process.Status status = 9

Used in: Process

• STATUS_UNSPECIFIED = 0

• STATUS_UNKNOWN = 1

• STATUS_IDLE = 2

• STATUS_RUN = 3

• STATUS_SLEEP = 4

• STATUS_STOP = 5

• STATUS_ZOMBIE = 6

• STATUS_TRACING = 7

• STATUS_DEAD = 8

• STATUS_WAKE_KILL = 9

• STATUS_WAKING = 10

• STATUS_PARKED = 11

• STATUS_LOCK_BLOCKED = 12

• STATUS_UNINTERUPTIBLE_DISK_SLEEP = 13

ProcessList of running processes on the host system.

Used in: c2.ReportProcessListRequest

• repeated Process list = 1

Tome for eldritch to execute.

Used in: c2.Task

• string eldritch = 1

• map<string, string> parameters = 2

• repeated string file_names = 3