Comments (6)
I strongly suggest you don't expose the C3 Web UI to your external IP. If you must connect from an external location I would advise possibly using an SSH tunnel and IP whitelisting
from c3.
BTW, if you're in need of support with C3 or just want to come and talk with the @mwrlabs #RedTeam then make sure you have signed up to the #BloodHound Slack (https://bloodhoundgang.herokuapp.com) and see us here https://app.slack.com/client/T20LT7NJX/CNL0132BY.
from c3.
from c3.
Could you provide us with defender event log from the detection?
Go to Event Viewer >> Applications and Services Logs >> Microsoft >> Windows >> Windows Defender >> Operational
. Interesting Event ID will probably be one of 1006, 1007, 1015, 1116, 1117, 1120, and send us the Details -> XML View
from c3.
from c3.
Hi, that looks like Defender is flagging on the Gateway exe which I have seen before. It's usually because Defender doesn't like it's behaviour. Consider not using defender where you have the gateway deployed?
What do you mean by "ATP blocks the the relay connection" - which connection? is it blocking the relay talking over Slack or UNCShareFile?
"defender blocks when peripherialbeacon is added to connect to cobalt strike" - the log you provide above doesn't show this. Can you explain more please?
from c3.
Related Issues (20)
- Network Error HOT 3
- Issues with SendHttpRequest function in SlackApi.h HOT 1
- Update dependency 'vis' HOT 1
- No longer works with Covenant after update HOT 4
- O365 Outlook/OneDrive missing header and Base64 error for O365 Task HOT 2
- UP
- Request should be recreated following access_token refresh
- Failed to open Session Handle (Windows 7 / Server 2008)
- Controller error: Gateway <ID> already connected HOT 1
- Exception caught HOT 6
- GetLdrpHandleTlsOffsetData for 21H1?
- Early function return in LoadPe() fails to release memory in error branch
- Custom Payload
- Install.sh (client) -- cd: too many arguments.
- Link to Tutorial is Broken HOT 1
- question HOT 3
- Network Error HOT 1
- Throwing exception: unable to create channel HOT 2
- OneDrive365RestFile channel: "Cannot refresh token: Bad Request" HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from c3.