Monitor PhantomPi implant packet captures for credentials, NTLM hashes, Kerberos tickets, and tokens. Triggers on: credentials, hashes, creds, sniffer, captures, pcap, kerberos, ntlm, tokens, passwords.
Manage network pivoting through a PhantomPi implant: check pivot readiness, discover reachable internal subnets from captured traffic, set up routes through the spoofed identity on veth1, and manage Ligolo-ng agent sessions. Triggers on: pivot, ligolo, route,…
Check PhantomPi implant health: connectivity, interfaces, services, uptime, ports. Triggers on: status, alive, health, implant, services, uptime, interfaces, ports.
Relay routine bridge event notifications from PhantomPi implants. These are expected operational events, not incidents.