• System contains an inbuilt C2 server, allowing operators to build and execute techniques within the interface
  • Each stage of the ATT&CK framework has multiple tools available, all linked in the common ways operators will want to use them
  • For example: an operator can build an implant, connect it to the operation, and run it through defence evasion tools, before deploying