Class 27 Reading: Persistence - taylortommy23/401-Reading-Notes GitHub Wiki

What is one of the major advantages of PowerShell Empire?

  • Its flexibility and extensibility in performing various offensive security operations.

What are some of the APT groups that have been known to use PS Empire and into which step of the Cyber Kill Chain does the use of PS Empire fall?

  • APT 29,33,34,and 41. It usually fall in the exploitation stage.

What are the four main components needed to pull off an attack using PS Empire?

  • The four main components needed are Listener, Agents, Modules, and Stager.

Resource: https://www.bleepingcomputer.com/news/security/powershell-empire-framework-is-no-longer-maintained/