For agent overview and update frequency, check out the Overview Matrix.
Mythic feature descriptions and documentation is at the bottom of the page.
Mythic Feature Descriptions:
adjust commands: Docs - The agent can load/unload commands dynamically and report back these adjustments to Mythic to properly update Mythic's tab-complete functionality
alerts: Docs - The agent can report back alerts or events into the operational event log
artifacts: Docs - The agent reports back artifact data (ex: spawned process PIDs or files touched) available in the artifacts tab.
browser scripts: Docs - The agent leverages browser scripting for commands to turn text results into buttons, tables, and more.
credentials: Docs - The agent reports back data that is registered within Mythic's credential store
docker: The agent is deployable via Docker and mythic-cli
dynamic loading: The agent supports dynamically loading of new commands at run time
file browser: Docs - The agent reports back file browser data to populate the file browser on the main active callbacks page
file chunking: Download, Upload - The agent uses file chunking when download/uploading files.
interactive: Docs - The agent supports follow-on interactive tasking
keylogging: Docs - The agent reports back keylogging data that's available within Mythic's keylog store
opsec checks: Docs - The agent leverages dynamic opsec checks during task creation to potentially block non-opsec safe commands
p2p: Docs - The agent can link via a peer-to-peer mechanism to another agent
process browser: Docs - The agent can report back process information to populate the process browser on the main active callbacks page.
process responses: Docs - The agent does additional processing directly on the output of some tasks before registering that output with the Mythic server
push c2: The agent supports Push style C2
rpfwd: Docs - The agent supports rpfwd (reverse port forward) functionality
screenshots: Docs - The agent reports back screenshots that are saved in the screenshots search page
socks: Docs - The agent supports SOCKS functionality
subtasks: Docs - The agent uses subtasking to automatically issue follow-on or pre-flight commands
task callbacks: Docs - The agent uses task callbacks to automatically perform additional processing once a task completes
tokens: Docs - The agent reports back token information into Mythic's Token store and can leverage tokens as part of tasking
translation containers: Docs - The agent uses translation containers to add more customization to the agent's C2 messages and/or encryption
wrapper: The agent is a "wrapper" payload type which means it takes another agent or wrapper as input and wraps the payload into another payload type.