# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# SRI-SLO-FF-2012-177-CherryBlossom_UsersManual_CDRL-12_SLO-FF-2012-171

- 1
- 2
…
- 35
- 36
- 37
- 38
- 39
…
- 174
- 175

SECRET//20350112
timeout VPN Proxy will be started for this MAC address, even though a previous VPN
Proxy Action for this MAC address has already completed.
(S) Primitive MAC Targets do not inherit actions. It is assumed that if a Primitive MAC
has been added to a Mission that the operator has high confidence in the Actions to
perform (and not to perform) on that Target; hence, it is undesirable for Primitive MAC
Targets to inherit Actions.
7.8 (S) Target Analysis Using CherryWeb
(S) CherryWeb has some facilities to help analyze Target activity, form associations
between MAC addresses and email/chat Targets, show all Flytraps that a Target has been
detected at, etc. These facilities are described in more detail in 9.20 and 9.21.
(S) Furthermore, the Copy Action can be used to gather and then further analyze Target
network traffic in pcap format (see 5.2.3.9.2).
37
SECRET//20350112

- 1
- 2
…
- 35
- 36
- 37
- 38
- 39
…
- 174
- 175