Search Results

Partners can manage payments and subscriptions by visiting our Dashboard and clicking the Payment Management tab in the Partner Portal. This will take you to the Payment Management page where you will be able to see user payment methods in...

Where to Find a Group’s Current Proxy Configuration Setting How to Update a Group to Enable a Proxy Server How to Update a Group to Not Use a Proxy How to Remove a Saved Proxy Configuration in a Group How to Install an Agent Using a Prox...

How to Create a Tailored Behavior How to Create and Edit Temporary Tailored Behaviors How to Delete Tailored Behaviors How to Copy Tailored Behaviors to a Different Group Creating a Tailored Behavior from the Extortion Response Page The...

Users must have an already existing SSO Integration through Cyber Crucible to require users in a group to sign in using their integrated SSO. For more on how to complete this integration click here.First, go to the Groups page found under ...

The latest installer is downloaded from https://installerfiles.rpp.cybercrucible.com/installers/64/installer-cli.exePowerShell (PS1) install scripts will use a WebClient instance. Batch (BAT) install scripts will use BitsAdmin, or JScript ...

Installing Cyber Crucible with SCCM is no different than any other software package. The key points for deployment via SCCM are:Deploy with the pre-made PS1 script, downloaded from https://dashboard.cybercrucible.comLook for the Cyber Cruc...

True-up licenses are issued temporarily to agents when there are no more licenses available in the agent’s group (or distribution group) to assign to the agent. These true-up licenses allow the agents to be fully activated and working whil...

What is memory modification? Memory modification, as Cyber Crucible use the term, is when the executable sections of a process' memory have been modified in abnormal ways. The normal execution of a given process, without outside tampering, does not trigger...

Clients can integrate their Microsoft Entra ID (Azure AD) SSO with the Cyber Crucible dashboard by following these steps below:Client updates in the Entra ID SAML configFirst, go to Enterprise applications and click the desired appIf you d...

Mitre TechniquesSummaryTraining ScenariosT1037Malware may instruct Windows to execute malicious scripts on boot or when a user logs in.T1055Process injection, usually used to run malicious code in a target process while allowing the origin...

How to Register a Deal Deal Length and Billing Cycle Options How to Know when a Deal is Approved How to Request a Quote for an Existing Deal How to Pay for a Deal How to Download a Signed Quote How to Edit a Deal How to Disable a Deal Ho...

What are process injections?Process injections are when a (potentially malicious) process A forces process B to execute instructions that are not otherwise a part of its code. Process injection has many different techniques, the most commo...

Removing users from a group is easy.First, go to the Groups page found under the Administration tab in the sidebar.Then click the Manage Group icon on the group you want to remove the user from.Clicking the icon will popup the Manage Group...

Creating a Role Assigning Roles to Users Deleting a Role from a Group Editing a Role’s Permissions By default, there are three built-in roles:Guest has no permissions.Read Only grants read only permissions to tailored behaviors, silent ...

Introduction How to Create a Sales Notification How to Delete a Sales Notification How to Turn a Sales Notification Off Without Deleting IntroductionSales Notifications are alerts emailed out to users relating to sales activities, and t...

Script Arguments Download the Script How to Run the Script How to find Your Refresh Token Cyber Crucible has created a Powershell Script that can take in a CSV file path containing Net bios machine names to automatically release license...

How to Purchase Training Licenses How to Assign Training Licenses to Users How to Release Training Licenses from Users How to Turn Training Mode On/Off How do I Reset My Training Data How to Purchase Training LicensesUsers can navigate ...

First, it is very important to note that memory alterations happen for a couple different reasons:In-memory attacksInteraction between programsSoftware bugsExploitsSo, a process injection or memory altering technique used, even between pro...