CounterCraft Deception Director

CounterCraft Deception Solution detects advanced adversaries. Automate counterintelligence campaigns to discover targeted attacks with real-time active response.

Category

Deception & Breach Simulation

Pack

CounterCraft

Configuration parameters

• server — Deception Director Domain or IP Address (required)
• api_key — API Key for Deception Director connection (required)
• secret_key — Secret Key for Deception Director connection (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetch — Fetch incidents
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval

Commands (15)

• countercraft-create-campaign — Create a new deception campaign.
• countercraft-create-host-machine — Deploy a new deception host.
• countercraft-get-events — Get full list of Events.
• countercraft-get-object — Get information about an object (IoC).
• countercraft-list-breadcrumbs — List breadcrumbs in a campaign.
• countercraft-list-campaigns — List all deception campaigns.
• countercraft-list-dsns — List Deception Support Nodes (DSNs).
• countercraft-list-hosts — Lists all deception hosts.
• countercraft-list-incidents — List all incidents currently active.
• countercraft-list-providers — List providers (providers for hosts or services i.e. AWS or Office365).
• countercraft-list-services — List services currently deployed on deception hosts.
• countercraft-manage-breadcrumb — Manage breadcrumb.
• countercraft-manage-campaign — Manage Campaign parameters.
• countercraft-manage-host — Manage a deception host.
• countercraft-manage-service — Manage a deception service.