# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Dark Matter

# NightSkies v1.2 - User Guide

1 December, 2008

- 1
- 2
…
- 7
- 8
- 9
- 10
- 11
…
- 15
- 16

SECRET//20330530
(KEY_MAGICSTR) served up on the php page to
identify the link to the tasking
file. Should not contain any
escaped characters.
Time in seconds since last
successful beacon before uninstall
(KEY_UNINSTALL_INTERVAL)
Uninstall the implant after this
many seconds since the last
successful beacon. This interval
initially starts counting from the
Enable Date, or now if Enable
Date is 0.
Long
Minimum time interval between
beacons in seconds
(KEY_MIN_INTERVAL)
Force the implant to wait this
many seconds before running
again.
Long
Attempt to failsafe after maximum
delay
(KEY_FAILSAFE)
If no beacon has been triggered
after maximum delay, attempt to
beacon out anyway (possibly
alerting)
y or N
Maximum delay when using
failsafe
(KEY_MAX_INTERVAL)
Maximum amount of seconds to
wait between failsafe beacons
Long
Enable Date
(KEY_LAST_SUCCESS_TIME)
Date to wait until before
enabling NightSkies. When used
in conjunction with Dark Matter,
set this to 0.
YYYY-MM-DD-HH:mm:SS
or 0 for no delay
Applications and directories to
watch for activity before triggering
(KEY_PATHLIST)
Common applications
NightSkies watches to detect
network activity. Can also
specify folders to watch for user
activity.
Comma-delimited strings
Output path
(outputpath)
Name of output folder String
Upload directory on LP
(payloaddir)
The folder on the LP that
NightSkies will upload results
and files to.
String
Once the wizard is complete, run tasks to enter the tasking menu.
ns> tasks
==== NSConfig Tasking ====
add: Add tasking group
edit: Edit a tasking group
delete: Delete tasking group
show: Show current tasks
help: Help (print this menu)
quit: Quit this menu
Run add to create a tasking group. Each tasking group will contain the tasks for NightSkies to run.
SECRET//20330530
6

- 1
- 2
…
- 7
- 8
- 9
- 10
- 11
…
- 15
- 16