Stop rebuilding your red team timeline from C2 logs

Neuron loves Mythic. Mythic is a popular command and control framework commonly deployed during red team engagements. With the Neuron CLI, you can easily capture the C2 telemetry from Mythic and all the other tools you're currently using. Let me show you how.

During red team operations, the Neuron CLI runs on our operator laptop. It connects out to both our Neuron server and our C2 infrastructure. Events from the C2 server are streamed back to Neuron.

Here I am logged into our Neuron server. I'm also connected to the C2 server, which is where Mythic is running. I've gained access to a workstation, which will serve as our victim machine. On my operator laptop, I'll use the Neuron CLI with its Mythic collector.

We'll go ahead and execute the implant that we have uploaded to our victim machine. We can see that the events are now streaming straight into Neuron by way of the Neuron CLI running on our operator laptop. It's the perfect pivot point between these two systems.

Let's go ahead and execute some tasks. The ls command shows us some files. So let me open that up in Neuron and take a look at what that looks like. Great. Now I'll go ahead and download one of these files. Let's take a look at these DB credentials. All of my actions and all of the telemetry coming out of Mythic is flowing straight into Neuron, and I can open it up in file shares and view the files inside Neuron.

With the Neuron CLI, every command is logged and you can easily turn events into findings no matter where they came from. Because every operator stays in sync, your report can be ready the day you finish. Imagine that. That's Neuron.