S1155 Covenant
toolEnterpriseplatformsLinux · macOS · Windows
also known asCovenant
Covenant is a multi-platform command and control framework written in.NET. While designed for penetration testing and security research, the tool has also been used by threat actors such as HAFNIUM during operations. Covenant functions through a central listener managing multiple deployed "Grunts" that communicate back to the controller.
01
techniques used (10)
ATT&CK techniques this enables or maps to.
02
used by groups (1)
Threat groups associated with this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan