Skip to content

Download OpenBAS implant with correct architecture for CS agent #2868

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
damgouj opened this issue Apr 4, 2025 · 0 comments · Fixed by #2908 or OpenBAS-Platform/docs#142
Closed

Download OpenBAS implant with correct architecture for CS agent #2868

damgouj opened this issue Apr 4, 2025 · 0 comments · Fixed by #2908 or OpenBAS-Platform/docs#142
Assignees
Labels
feature use for describing a new feature to develop solved The issue has been solved

Comments

@damgouj
Copy link
Member

damgouj commented Apr 4, 2025

Context

When we add CS hosts in OpenBAS, the architecture x64 is set by default because the host architecture isn't known by Crowdstrike.

Use case

I launch a payload with a Crowdstrike agent but I don't know if it's going to work on my host because the implant x64 is always downloaded.

Proposed Solution

Adapt the script to download the implant for a Crowdstrike payload by checking the architecture in the script:

  • If the host arch is x64 -> download the implant x64,
  • If the host arch is arm64 -> download the implant arm64,
  • If the host arch is another arch -> curl OpenBAS to set a trace "Architecture not compatible with OpenBAS"

Add the compatible architecture in the docs and in the installation stepper for Crowdstrike.

If the feature request is approved, would you be willing to submit a PR?

Yes

@damgouj damgouj added feature use for describing a new feature to develop needs triage use to identify issue needing triage from Filigran Product team labels Apr 4, 2025
@damgouj damgouj self-assigned this Apr 4, 2025
@damgouj damgouj added this to the PoC MSSP milestone Apr 4, 2025
@Seb-MIGUEL Seb-MIGUEL removed the needs triage use to identify issue needing triage from Filigran Product team label Apr 4, 2025
@github-actions github-actions bot added the solved The issue has been solved label Apr 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature use for describing a new feature to develop solved The issue has been solved
Projects
None yet
2 participants