GHOSTS simulates what anyone might do at a computer, creating documents, browsing websites, and downloading files. GHOSTS drives all sorts of popular applications on many versions of Windows and Linux machines. Whether you're a friendly administrator or a powerful cyber adversary, GHOSTS can replicate your expected behavior.
GHOSTS has many use cases in cyber training and exercises, most notably for bringing non-player characters (NPCs) to life, but GHOSTS can be used for many other purposes where realistic activity on a computer is needed as well.
Version 7:
- It depreciates TCP communication between agents and the API
- Bumps all software and dependencies to the latest versions
- Adds sending users specific commands to execute (namely social media posts)
Be sure to check out other parts of the GHOSTS framework, ANIMATOR and SPECTRE.
There is a short demonstration video available on YouTube (3:03).
- Quick Start: Installation from distribution binaries
- GHOSTS Documentation
- Don't hesitate to submit issues and feature requests
GHOSTS clients simulate users on a machine doing "user-like" things. They can be configured to:
- Browse the web
- Create and edit office documents
- Send and respond to email
- Run terminal commands
- Etc.
The API server provides a way for clients to interact with the GHOSTS system and its clients. It can:
- Manage clients, add/remove them from groups, etc.
- Get/manage information from clients regarding their previous or current activities, etc.
- Orchestrate new activities for particular clients to perform
[DISTRIBUTION STATEMENT A] This material has been approved for public release and unlimited distribution. Copyright 2017 Carnegie Mellon University. All Rights Reserved. See LICENSE.md file for terms.