You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is it possible to create an agent and have it call one of its own event scripts before the file has finished being injected? Or do events get parsed into their own storage space before execution?
The text was updated successfully, but these errors were encountered:
I believe the order of script injection is supposed to be remove, events, installation. So unless the remove event calls it, the events should always be present before execution.
I know defining a BHVR that references a non-existing event script, you get an error. I believe that error comes from the engine, not the CAOS tool.
Nevermind, I forgot you're looking into interleaved CAOS.
In my attempts to figure this out, it appears that with JECT at least, install and body scripts are injected at the end after the removal and event scripts. Both body scripts and install scripts are installed alongside each other in the order they appear in the document. Both body scripts and install scripts are injected with JECT with flag 4 (Install Scripts).
Is it possible to create an agent and have it call one of its own event scripts before the file has finished being injected? Or do events get parsed into their own storage space before execution?
The text was updated successfully, but these errors were encountered: