Skip to content

Commit

Permalink
docs: fix typos
Browse files Browse the repository at this point in the history
  • Loading branch information
kevoreilly committed Aug 2, 2024
1 parent 13a3e12 commit 5da2832
Show file tree
Hide file tree
Showing 4 changed files with 5 additions and 5 deletions.
4 changes: 2 additions & 2 deletions docs/book/src/installation/guest/additional_configuration.rst
Original file line number Diff line number Diff line change
Expand Up @@ -4,14 +4,14 @@
Additional Configuration
=============================================

In this chapter we will enumerate several recommendations so as to make your Guest virtual machine as stealthy and operational as it gets. Additionally, we intent to address some of the most common problems that may arise.
In this chapter we will enumerate several recommendations so as to make your Guest virtual machine as stealthy and operational as it gets. Additionally, we intend to address some of the most common problems that may arise.

Windows Guest
=============

Windows Debloating
------------------
There some existing tools that automatically try to debloat your Windows instance. That is, uninstalling lots of pre-installed software and disabling intrusive features of Windows. The purpose of this tools is optimizatoin, performance, security or all at once. In the context of CAPE, they're useful to reduce noise and the probability of malware not detonating. Some of these tools are `Debloat-Windows-10 <https://github.com/W4RH4WK/Debloat-Windows-10>`_ or `BlackBird <https://www.getblackbird.net/>`_. You can find a larger list `here <https://github.com/RazviOverflow/Malware_Resources?tab=readme-ov-file#windows-debloating-performance-privacy-optimization>`_.
There exist some tools that automatically try to debloat your Windows instance. That is, uninstalling lots of pre-installed software and disabling intrusive features of Windows. The purpose of these tools is optimization, performance, security or all of these. In the context of CAPE, they're useful to reduce noise and the probability of malware not detonating. Examples of these tools are `Debloat-Windows-10 <https://github.com/W4RH4WK/Debloat-Windows-10>`_ or `BlackBird <https://www.getblackbird.net/>`_. You can find a larger list `here <https://github.com/RazviOverflow/Malware_Resources?tab=readme-ov-file#windows-debloating-performance-privacy-optimization>`_.

.. note::
It is recommended to use any of these tools to disable as much noise as possible. Remember to create a snapshot before executing them.
Expand Down
2 changes: 1 addition & 1 deletion docs/book/src/installation/guest/agent.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ mounting a CDROM containing the *agent.py* file) and run it. This will
launch the HTTP server which will listen for connections.

.. important::
It is a **MUST** to launch ``agent.py/w`` with **elevated privileges**. One of the (arguably) easiest way of doing so is creating a Scheduler task, as explained further below in this page.
It is a **MUST** to launch ``agent.py/w`` with **elevated privileges**. One of the (arguably) easiest way of doing so is creating a Scheduled Task, as explained further below in this page.

On Windows, if you simply launch the script, a Python window will be
spawned, with a title similar to ``C:\Windows\py.exe``. If you want to hide this window you can rename the file from
Expand Down
2 changes: 1 addition & 1 deletion docs/book/src/installation/guest/network.rst
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Windows Settings

.. note::

As it was discussed in the :ref:`previous chapter <additional_configuration>`, any additional configuration like **disabling** the *Windows Firewall* and the *Automatic Updates*, should be done before configuring the network like stated below. Given that VMs may be left without internet connection, it is convenient to download and make changes before it happens. The reason behind turning off updates and firewall is that these features can affect the behavior of the malware under normal circumstances and they can pollute the network analysis performed by CAPE, by dropping connections or including irrelevant requests.
As was discussed in the :ref:`previous chapter <additional_configuration>`, any additional configuration like **disabling** the *Windows Firewall* and the *Automatic Updates* should be done before configuring the network as stated below. Given that VMs may be left without internet connection, it is convenient to download and make changes before this happens. The reason for turning off updates and firewall is that these features can affect the behavior of the malware under normal circumstances and they can pollute the network analysis performed by CAPE, by dropping connections or including irrelevant requests.


Windows 10
Expand Down
2 changes: 1 addition & 1 deletion docs/book/src/installation/host/installation.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ We have automated all work for you but bear in mind that 3rd party dependencies
so please check the installation log and try to provide the fix / correct issue to the developers.

.. warning::
We advise against modifying or updating any package installed by the script explained below. By using package managers like ``apt`` there are high chances your KVM/libvirt/CAPE installation breaks and you will most likely end up riding the lanes of the dependency hell.
We advise against modifying or updating any package installed by the script explained below. By using package managers like ``apt`` there are high chances your KVM/libvirt/CAPE installation will break and you will most likely end up riding the lanes of dependency hell.

.. _installation_kvm:

Expand Down

0 comments on commit 5da2832

Please sign in to comment.