07.04.2017 / by maximios / Антропология / No Comments

DarkSeaSkies_1_0_URD

SECRET//NOFORN

Engineering Development Group

DarkSeaSkies 1.0

User Requirements Document

Rev. New 26 January 2009

 

darkmatter+darkmatter+docs+DarkSeaSkies 1.0 URD_Rev New_2009-01-26.doc

CL BY: 2348366 CL REASON: 1.4(c) DECL ON: 20331105 DRV FROM: COL S-06

 

Table of Contents

…………………………………………………………………………………………………………….1

ESCRIPTION…………………………………………………..1

APABILITY…………………………………………………………………………………..1

APABILITY………………………………………………………………………………………….1

………………………………………………………..1

TARGET SYSTEM OVERVIEW……………………………………………………………………..1

NVIRONMENT…………………………………………………………………………….1

ONSTRAINTS……………………………………………………………………………..1

4. USER REQUIREMENTS   2

EQUIREMENTS   2

EQUIREMENTS   2

EQUIREMENTS   2

EQUIREMENTS   2

 

iii

   Scope

of DarkSeaSkies 1.0.

1.1   Requirement Overview and Description

COG has a time-sensitive operational need for a porting of the current version of

periodically. This beacon must be persistent in the MacBook Air, and must leave a minimal on-disc footprint.

1.2   Current Capability

Nightskies 1.1 exists for the iPhone. Currently NightSkies does not have stealth and persistence capabilities.

1.3   New Capability

Provide persistence (DarkMatter), process, file, and network hiding (SeaPea), and a beacon (NightSkies), integrated onto a MacBook Air with current Mac OSX.

Applicable Documents

specification to the extent specified herein. In the event of a conflict between the documents referenced herein and the contents of this specification, the contents of this specification will be considered a superseding requirement. The following documents may be found at S:\DO\IOC\EDG ALL\EDG AE\Projects\:

• Nightskies MacBook Air 20081014, November 2008

DarkSeaSkies CONOP, Rev. 1.0, November 2008

• DarkSeaSkies User Manual, Rev. 1.0, November 2008

• SeaPea URD, Rev. 2.0, November 2008

• NightSkies User Requirements, Rev. 1.2, November 2008

Target System Overview

3.1   Operating Environment

The target system is a MacBook Air version 1,1 with firmware version MBA11.0088.B03. The operating system is Mac OSX 10.5.2-10.5.x.

3.2   Operating Constraints

Physical access is required for initial installation of DarkSeaSkies onto the target system.

The target system must have at minimum occasional Internet access in order to

1

a configurable period of time it will delete itself from the system.

User Requirements

Pre-deployment Capability Requirements

Configuration details are required prior to building DarkSeaSkies. Specifically,

.

Deployment Capability Requirements

   NightSkies shall support the Macbook Air with OS X 10.5.2 – 10.5.x.

   NightSkies shall be compatible with DarkMatter.

4.2.3 DarkMatter shall have the capability to disable itself after a configurable amount of time.

   DarkMatter shall have the capability of removing itself and its payload from the EFI.

   NightSkies shall be compatible with CP rootkit.

   NightSkies shall support the following implant features:

a. Beaconing to a listening post (LP)

b. Command receipt and execution from a LP

c. File transfer to and from the LP

d. Program file execution

e. Delay after browser starts to beacon

The tool shall be packaged manually, according to the parameters provided by

COG.

Post Deployment Capability Requirements

NightSkies User Requirements).

Security Requirements

None

2

 

darkmatter+darkmatter+docs+DarkSeaSkies 1.0 URD_Rev New_2009-01-26.doc

SECRET//NOFORN

Добавить комментарий

Вы вошли как maximios. Выйти?