A device can be infected via:
Components needed for correct infection include:
The factory is a model to be used to create agents to be installed. The icon varies according to the type of device intended for the agent:
The following must be set in the factory:
Tip: a configuration can be saved as a template to load it the next time you create a similar agent.
Tip: a factory can be used to create several agents: for example, to be installed via different installation vectors (i.e.: two computers with different operating systems).
Installation vectors are selected when compiling and define the installation method, physical or remote, for an agent. When compiling, available installation vectors may vary according to the device's operating system.
Several installation vectors can be used for the same agent.
NOTE: injection rules are used for injection on HTTP connections.
An agent is the result of compiling a factory with one or more installation vectors. An agent is ready to be installed on a device.
Basic configuration defines the type of data to be acquired while advanced configuration lets you dynamically and independently activate or deactivate modules.
For the types of modules available in basic and advanced configurations
For more information on agents
Modules trigger some activities on the target device, mainly data acquisition. They are enabled and set in the basic configuration (only some) or in advanced configuration.
Available module types also depend on the device type.
For the complete list