Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

Elsa User Manual.doc
21
SECRET//NOFORN
8.6 (U) PROCESSOR option Comma Separated Value Format
(S) Elsa A comma separated value file format is also supported. This is useful when
access point information can be obtained from other sources such as netsh. The switch
for this parameter is ‘-c’, and the file must be formatted as follows:
<colon delimited mac address>, <ssid>, <signal strength><carriage return>
Figure 18 - (S) Format for csv input.
(S) Note that a script is available for converting data from netsh output into csv files.
> netsh wlan show networks mode=bssid
Figure 19 - (S) Example command for enumerating wifi networks.
8.7 (U) PROCESSOR example usage
> processor.exe -k key.bin -i indir -o outdir
key : key.bin
input : indir
output : outdir
mask : (null)
processing 'indir\elsa.data' done
processing 'indir\elsa1.data' done
processing 'indir\elsa2.data' done
processing 'indir\elsa3.data' done
processing 'indir\elsag.data' done
5 files processed.
> processor.exe -i outdir\elsa2.data.xml -o relocate.xml -l microsoft
input : outdir\elsa2.data.xml
output : relocate.xml
provider : microsoft
processing Wed Jun 13 14:35:39 2012
processing Wed Jun 13 14:35:43 2012
processing Wed Jun 13 14:36:19 2012
processing Wed Jun 13 14:37:27 2012
Figure 20 - (S) Example of command line execution of the PROCESSOR tool
(S) The PROCESSOR generates an output file with the original filename and an .xml file
extension. An example entry is shown below.

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh