Credentials
Last updated
Last updated
Credentials can be found from the "Operational Views" -> "Credentials" page on the top navigation bar.
Right now, no commands automatically populate credentials, but that'll change in the future. Instead, go to the credential page and manually add in the credentials you find. There are a few pieces of information required:
The type of credential - This is more for situational awareness right now, but in the future will help the flow of how to treat the credential before use.
Account - the account this credential applies to
Realm - the domain for the credential or a generic realm in case this is a credential for something else. If the account is a local account, the Domain is the name of the computer.
Credential - the actual credential
Comment - any comment you want to store about the credential
On this page you can also see the task that created credentials (which can be Manual Entry ), who added in the credential, and when it was added.
Command parameters can have a type of Credential which hooks into this information. Take the apfell-jxa's shell_elevated command for example:
When a command parameter is type Credential, there will be two drop-downs in the dialog popup. The first one is selecting the credential you're interested in, and the second one is selecting the piece of that credential you need. In the above screenshot, the command takes both a credential and a user. So, you select the general credential object, then the piece you actually want.
Tasks can register credentials with the server in their responses by following Credentials format. The parsing and reporting is an agent-duty because the format of credentials can vary wildly across operating systems, types of credentials, locations, and OS versions.
