# Agent Detail

{
  "Agent": {
    "affected_platforms": [
      {
        "architecture": "32-bit",
        "name": "Windows Server 2022"
      }
    ],
    "attack_modules": [
      {
        "config": {
          "email": {
            "connection": {
              "auth_method": "browser_login",
              "client_method": "IMAP",
              "encryption": "UseSSL",
              "host": "imap.corp.local",
              "mail": "picus@corp.local",
              "port": 993,
              "timeout": 30
            },
            "dest_mail": "target@corp.local",
            "dest_name": "Target User",
            "timing": {
              "attack_interval": 60
            }
          },
          "exfiltration": {
            "smtp": {
              "encryption": "StartTLS",
              "host": "smtp.corp.local",
              "mail": "picus@corp.local",
              "port": 587
            }
          },
          "lateral": {
            "remote_domain": "CORP",
            "remote_host_name": "SRV-DC-01",
            "remote_user_name": "svc-picus"
          },
          "nat": {
            "http_port": 80,
            "https_port": 443,
            "ip": "1.1.1.2"
          },
          "url_filtering": {
            "urls": [
              {
                "url": "http://example.com"
              }
            ]
          },
          "wats": {
            "protocol": "https",
            "url": "https://wats.corp.local",
            "waf_type": "ModSecurity"
          }
        },
        "delay_seconds": 30,
        "name": "File Download"
      }
    ],
    "created_at": 1650284604358,
    "custom_attacker": {
      "id": 7,
      "ip": "10.0.4.21",
      "name": "DC-Attacker-01"
    },
    "devices": [
      {
        "name": "FortiWeb",
        "product_platform": "FGWVM",
        "product_version": "6.3.7"
      }
    ],
    "execution_users": [
      {
        "id": 1,
        "user_type": "privileged",
        "username": "CORP\\svc-picus-adm"
      }
    ],
    "id": 1,
    "ip": "1.1.1.1",
    "name": "Agent-1",
    "nat_ip": "0.0.0.0",
    "platform_architecture": "64-bit",
    "platform_name": "Windows 10",
    "status": "alive | dead | expired",
    "type": "QuickEmail | Browser | Installable Agent | Windows | Linux | MacOS",
    "version": "3.4.0.0"
  }
}