{{current_signature.classification | class_long}}
{{current_signature | tc_signature}}
{{current_signature.classification | class_long}}
  
  :: Generates an IMPLANT_NAME Tag
  :: Generates an THREAT_ACTOR Tag
  :: A function to call when the signature hits. These are stored in callbacks.py.
  
  
  

List of all tags to match with the following format: (one per line)
TAG_TYPE:TAG_VALUE
Note: both type and values can be REGEX i.e. .*MUTEX.*:(?i)BMUTEX\\!

Changing the status of a tagcheck signature

Before changing the signature state take note of the following:

  • Only admins can set a tagcheck signature to DEPLOYED.
  • Only admins can change DEPLOYED signature to another status.
  • All other status can be set at anytime on any signature by any user.