Loot / Feed view

[hulto]

Credit @cmp5987

Problem

As realms capabilities grow important information may get buried in the output of queued tasks & quests. We're already starting to see this when an operator tries to view task output they need to navigate through the quest list, and task list, before they can view their desired output.

The only way to improve this currently would be to save the URL or quest name and scroll.

For example on a long running op with multiple operators you may wish to highlight specific detection or response capabilities running on a host. Right now you either need to remember and verbally communicate all of that information to another operator or the other operator has to dig through or worse re run every command.

Solution

Create a central "loot" view that allows operators to highlight specific task output that is important to achieving their goals.

Since operators can have a variety of goals implementing a loot tagging solution may also be important. These tags could include: credential material, evasion, escalation, potential pivots.

The proposed workflow would be once a task comes back with output, that output can be highlighted as loot. A description and optional tags can be provided. Once the output has been highlighted as loot it will show up in a new loot view along with all other task output highlighted as loot.

Other operators may be able to comment on discovered loot to add additional context.

[hulto]

I would like emoji reacts or at least heart reacts like paragon had 🔥