added beacon established note script

bluscreenofjeff · Dec 16, 2016 · 0117ff2 · 0117ff2
1 parent 501a3d5
commit 0117ff2
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -5,6 +5,8 @@ Aggressor scripts for use with [Cobalt Strike](https://cobaltstrike.com) 3.0+
 
 **beaconid_note.cna** - set Beacon note to its ID on load and initial checkin (primarily useful when coding Aggressor scripts)
 
+**beaconestablishednote.cna** - set Beacon note to the time it was established on initial checkin
+
 **Beaconpire** - send Beacons to Empire and pull Empire Agents into Cobalt Strike
 
 **CCDC** - a collection of scripts designed for use at CCDC

diff --git a/beaconestablishednote.cna b/beaconestablishednote.cna
@@ -0,0 +1,3 @@
+on beacon_initial {
+	bnote($1,"Established: " . formatDate('MM/dd/yyyy HH:mm:ss (z)'));
+}