Using the Template

Download

In the BrazenCloud portal, navigate to the Actions section using the left navigation bar.

In the Actions list find template:binary and click it the download button on the right:

template:binary download button

All Actions are packaged as zip file, and the template is no different. Make sure and save the Action.zip file that the portal requests to download. Then go ahead and extract it.

Inside of the Action folder you will see files called manifest.text, README.txt, runway and a folder called Windows.

Read README.txt for detailed instructions on how the Action is structured and how to modify it.

The README file may refer to an Action as an 'applet', this was the old nomenclature.

Modify

With the template in hand, the easiest way to create another Action is to simply add your executable and update the manifest.txt.

Inside of the Windows folder is an executable file called LastActivityView.exe. This is a sample binary file showing you how this type of Action works.

The readme.txt file inside of the Windows folder provides information about this sample binary.

In the file manifest.txt we can see that run.bat is being launched:

COPY . .
RUN_WIN windows\run.bat

Open the file run.bat to see the following commands:

@CD /d "%~dp0"
lastactivityview.exe /shtml ..\results\lastactivityview.html

Notice that it runs the sample binary called lastactivityview.exe. If you want to add your own binary named your_binary.exe, do the following:

1. Delete all the files from "Windows" folder except for run.bat:

2. Copy your_binary.exe to the Windows folder

3. Change the content of run.bat to something like:

@CD /d "%~dp0"
your_binary.exe

You can also add any parameters you would like.

To collect the output of running the binary file, you may need to redirect the output to the results folder, as that is the folder automatically zipped up by the BrazenAgent. You can do that by:

your_binary.exe > ..\results\result.txt

If your executable supports logs, you can collects those logs by redirecting them into the results folder as well.

Next Steps

Now that you have your Action written, it is time to publish it. Take a look at:

Build and Publish

For a more advanced and in depth take on Actions:

Overview