Attack vectors

Attack vectors

Manage all Attack Vectors of the company


BlackNoise Attack Vectors execute simulation events (offensive actions). They are deployed on your Information System to carry out the technical actions (events) within the defined campaign scope and based on the configured technical settings.


Attack Vectors list


This list provides all information about your Attack Vectors:
  • Alias (the name you provide)
  • Identifier
  • Campaign using the Attack Vector
  • Creation date
  • IP address
  • Version
  • Status: operational, non operational, working or deploying

To facilitate the use of this list, several features are available:
  • Display order by identifier or creation date
  • Application of filters: type, used or not within a campaign
  • Search field


Set up a virtual Attack Vector

Check the Setup section titled "1) Deploy an Attack Vector" in this documentation for more information on what you need and how to install an Attack Vector:
 https://doc.blacknoise.co/p/FtdVpP2Qnl33xq/1-Deploy-an-Attack-Vector 
You can quickly launch a BlackNoise Attack Vector from the Resources > Attack Vectors page. Simply click the Create attack vector button in the top right and provide a name (alias) for this Attack Vector.

Next, copy the docker command from the screen and paste it into the terminal of the host deployed for that purpose (check prerequisites from the Setup section:  https://doc.blacknoise.co/p/FtdVpP2Qnl33xq/1-Deploy-an-Attack-Vector ).

The attack Vector shows up in the web app list. The container image is downloaded and started. Once the authentication between the Docker container and the BlackNoise web app is done, the Attack Vector is ready to use (ie. operational). This is shown by a green dot. It can now be used in an attack campaign.

If the system clock of an Attack Vector is not synchronized, the platform now calculates the Time offset against the reference clock (requires Attack Vector version 1.4.0). This data is also provided within this details screen.

Please refer to our FAQ if you need help with Attack Vector deployment troubleshooting:
 https://doc.blacknoise.co/p/ps6ZTNIhewUzS9#pErBdmb4jZhUQv 


Update an Attack Vector

If a red star is displayed next to the version number of the Attack Vector, it indicates a newer version is available. Install it to access the latest features and updates that enhance event execution.
Click the Attack Vector name to display its details sheet. Then click the Update version button. The update completes automatically. The different steps display on the screen. The update process may take several minutes depending on your connection speed and machine performance.