Advanced Reporting Plugin

The report plugin replaces the original reporting functionality in Empire with customizable PDFs and Markdown files. The PDFs use a style.css and Jinja2 template markdown files to generate the PDF reports. The style.css and markdown files can be customized with personalized logos or other information. The reports use MITRE ATT&CK to generate two tailored reports: Empire Report and Module Report. The Empire Report parses out the information about Empire and creates a PDF about the attack techniques based on the MITRE ATT&CK framework. The Module Report uses the master log to extract all of the used modules and creates individual sections based on the modules used. Examples of the reports can be found here.

Prerequisites

• Empire 5.5+
• MD2PDF
• Tabulate

Install

To run the plugin, install the following packages with Empire.

sudo poetry add md2pdf tabulate

Then run the following command to add the plugin to Empire.

cd empire/server/plugins/
git clone https://github.com/BC-SECURITY/Report-Generation-Plugin