Actions Plugins

Actions are the platform’s workhorse — small, focused plugins that run scripts, configure networking, manage users, or tweak a single machine setting. You’ll stack many of them on each VM. Reach for an Action when there isn’t already a Role or Application that does what you need.

Available plugins

Plugin	What it does	Params	Uses
Run Powershell Script	Executes a custom PowerShell script on Windows. Creates testFire.ps1, runs it with Bypass execution policy, and deletes the script after.	ScriptContents	1,222
Auto Log User Into Machine	Configures Windows auto-logon with the provided credentials, reboots to activate, then creates desktop shortcuts for cmd and PowerShell.	username password	1,163
Set UI To Performance Mode	Strips Windows visual effects to keep the VM responsive. Must run after auto-logon so the per-user startup folder exists.	username_of_loggedin_user	1,152
Run Bash Script	Executes a custom Bash script on Linux. Writes to /script.sh, runs it, and deletes the file after.	ScriptContents	502
Add Users/Groups to Local Administrators	Manages Windows local Administrators membership from a CSV — supports domain and local accounts, additive or exclusive replace mode.	ReplaceExistingUsersGroups UsersAndGroupsToAdd	493
Restart Windows Machine	Restarts a Windows machine.	—	492
Create Static IP (Windows)	Configures a static IP, gateway, DNS, and subnet mask on a Windows network interface, reboots, then validates.	IP gateway dns mission_interface SubnetMask	360
Mount Student Share to All C:\users	Drops a .bat into every C:\Users\*\Startup folder that mounts the studentshare on user login. Pairs well with Auto Log User and Auto Execute.	DriveLetter	356
Run Batch Script	Executes a custom batch script on Windows via cmd.exe start, then deletes the file after.	ScriptContents	309
Auto Execute .exe, and Office Files	Continuously scans a directory and auto-launches executables, batch files, Office documents, and archives on every login — for training scenarios that need realistic user activity.	FolderToCheckForExecutes	140
Mount student share and create desktop shortcut on Linux	Mounts the student SMB share (172.40.1.40/studentshare) on Linux with a desktop shortcut for the named user.	username	131
Set Static IP (Linux)	Sets a Linux machine to use a static IP address.	StaticIP SubnetMask SetGateway	111
Copy Class Share (ROPS-RT1)	Copies the legendary class share zip (including the Cobalt Strike 4.12 client) from ROPS-RT1 to a chosen path.	PathToCopyTo	105
Restart Linux Machine	Restarts a Linux machine.	—	101
Set User Homedirectories	Maps AD users’ homeDirectory paths from a CSV of samaccountnames — appends each user’s samaccountname to the given filepath. Must run on a DC.	HomedirectoryFilepath ListOfUsers	60
Enable RDP (Remote Desktop Protocol)	Enables RDP on Windows — disables NLA, starts Terminal Services, opens the firewall, reboots, and validates port 3389.	—	58
Configure Exchange (Outlook) On Workstation	Configures Outlook on a domain-joined Windows workstation to auto-connect to an Exchange Server mailbox with no first-run prompts.	Username Password ExchangeServer	43
Change Linux Hostname	Changes a Linux machine’s hostname.	NewHostname	40
Enable Forensic Logging	Enables comprehensive Windows forensic logging — Yamato Security event-log config and Sysmon64 with a tuned XML.	—	22
Create AD Trust	Creates an Active Directory trust between two forests.	RemoteFQDN	18
Configure Web Proxy (Point at Squid Proxy!)	Configures a Windows domain-joined machine to route all HTTP/HTTPS traffic through the AD Squid proxy, with firewall rules blocking direct internet access on 80/443.	ProxyDNSName	16
Set Static IP (Linux Ubuntu)	Sets a static IP on a netplan-managed Ubuntu machine.	StaticIP SubnetMask SetGateway	12
Stop/Halt all Auto Updates	Disables Windows Update so the VM stops auto-rebooting mid-scenario.	—	5
Install Nextcloud Active Directory Auth	Joins a Nextcloud server to AD and configures Kerberos SPNEGO authentication via Apache mod_auth_gssapi — enables pass-the-ticket login for Edge/Chrome.	DomainNameFQDN Description DomainOUPath	2
Install Nextcloud Active Directory Auth (Windows Client)	Configures a domain-joined Windows workstation to authenticate to Nextcloud via Kerberos SPNEGO with Edge and Chrome AuthServerAllowlist policies.	DomainNameFQDN NextcloudDesiredDomainName	2
Add SPN to user to enable Kerberoasting	Configures an AD user for Kerberoasting by adding a Service Principal Name (SPN).	samaccountname domainFQDN	1
Update Active Directory Computer Description via PowerShell	Updates the description attribute on an AD computer object via PowerShell using the supplied domain admin credentials.	domainAndUser domain_admin_password hostnameDN newDescription	1
Auto Open Documents on User Login	Auto-opens Office documents, PDFs, and text files on Windows user login in a continuous loop for training scenarios.	samaccountname fullpath	0
Change Windows Hostname	Changes the Windows hostname (do not run on a domain-joined system).	NewHostname	0
Deploy and schedule PowerShell action script at Windows startup	Deploys a PowerShell script that runs at startup as SYSTEM, monitors AD for a target hostname, and executes a designated script when it appears.	fileToExecute targetHostname	0
Disable NTLM to enforce Kerberos-only auth	Enforces Kerberos-only authentication by disabling NTLM domain-wide via three registry keys, then reboots.	—	0
Force Logoff of all Active User Sessions	Forces a logoff of all active user sessions on a Windows system.	—	0
Sleep Deploy	Sleeps the deployment of this machine for X minutes.	SleeptimeMinutes	0
Update Windows Machine Completely	Runs Windows Update to fully patch the machine before the rest of the build proceeds.	—	0