S0363 Empire
toolEnterpriseplatformsLinux · macOS · Windows
also known asEmpire · EmPyre · PowerShell Empire
Empire is an open-source, cross-platform remote administration and post-exploitation framework that is publicly available on GitHub. While the tool itself is primarily written in Python, the post-exploitation agents are written in pure PowerShell for Windows and Python for Linux/macOS. Empire was one of five tools singled out by a joint report on public hacking tools being widely used by adversaries.
techniques used (73)
ATT&CK techniques this enables or maps to.
used by groups (17)
Threat groups associated with this.
used by campaigns (1)
Campaigns that use this.
Detected by (Sigma) (1)
Sigma detection rules related to this.
source
Where this definition is published.
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan