Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//ORCON//NOFORN
4.2 Tracking Tables
The daemon-mode post processor generates tables at the end of each
processing loop to provide status on chunk files that represent part of a larger
input file.
Chunk File Tracking Table
The chunk file tracking table provides a list of all partial files that are in the
process of being assembled from chunk files. The table consists of the following
columns:
Target ID
Implant ID of the target that sent the chunk files
Only available after the first chunk of the assembled file is
received
File Name
Name of the assembled file in the staging directory as it is
constructed
Chunks Rcvd
Number of chunks received by the post processor
(approximate)
Total Chunks
Expected number of chunks in the assembled file
(approximate)
File Size
Total size of the assembled file (approximate)
Last Received
Last time a chunk was received for the assembled file
Chunk File Gap Table
The chunk file gap table is displayed when chunks have been received out of
order for an assembled file and identifies gaps in the received chunks. The table
consists of the following columns:
Target
Implant ID of the target that sent the chunk files
Only available after the first chunk of the assembled file is
received
File Name
Name of the assembled file in the staging directory as it is
constructed
Start
Starting offset of the gap found in the assembled file
(approximate)
End
Ending offset of the gap found in the assembled file
(approximate)
Chunks
Number of chunks that make up the gap (approximate)
116
SECRET//ORCON//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh