This post covers how operators can leverage Nighthawk’s scripting capabilities to automate repetitive tasks during red team engagements, freeing operators to focus on higher-order decision making.
Automation workflows can be triggered by events within the C2 — such as a new beacon checking in, a specific hostname matching a pattern, or a time-based schedule.
Example: Auto-enumerate on check-in
on beacon_checkin {
if hostname matches "DC*" {
run enumerate-dc
}
}