Credentials & Artifacts¶
Credential store and artifact (IOC / forensic evidence) tracking.
Auto-generated
This page is generated from source code by the schema extractor. Do not edit by hand — changes will be overwritten.
mythic_get_credentials¶
Get a list of all credentials stored in Mythic
No parameters.
mythic_get_credential¶
Get details of a specific credential by ID
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
credential_id | int | required | ID of the credential to retrieve |
mythic_get_operation_credentials¶
Get credentials filtered by operation
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
operation_id | int | required | Operation ID to filter credentials |
mythic_create_credential¶
Create a new credential entry
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
type | string | required | Credential type (plaintext/hash/key/ticket/etc.) |
account | string | required | Account/username |
realm | *string | optional | Domain/realm |
credential | string | required | The actual credential (password/hash/key) |
comment | *string | optional | Additional notes about the credential |
mythic_update_credential¶
Update an existing credential's properties
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
credential_id | int | required | ID of the credential to update |
type | *string | optional | New credential type |
account | *string | optional | New account/username |
realm | *string | optional | New domain/realm |
credential | *string | optional | New credential value |
comment | *string | optional | New comment |
mythic_delete_credential¶
Delete a credential from Mythic
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
credential_id | int | required | ID of the credential to delete |
mythic_get_artifacts¶
Get a list of all artifacts (IOCs, forensic evidence)
No parameters.
mythic_get_artifact¶
Get details of a specific artifact by ID
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
artifact_id | int | required | ID of the artifact to retrieve |
mythic_get_operation_artifacts¶
Get artifacts filtered by operation
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
operation_id | int | required | Operation ID to filter artifacts |
mythic_get_host_artifacts¶
Get artifacts filtered by host
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
host | string | required | Hostname to filter artifacts |
mythic_get_artifacts_by_type¶
Get artifacts filtered by base_artifact type (e.g. ProcessCreate, FileWrite, API). Uses case-insensitive partial matching.
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
artifact_type | string | required | Artifact base_artifact type to filter by (e.g. ProcessCreate |
mythic_create_artifact¶
Create a new artifact entry (IOC, forensic evidence)
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
artifact | string | required | The artifact (file path/registry key/etc.) |
base_artifact | *string | optional | Base artifact for pattern matching |
host | *string | optional | Hostname where artifact was observed |
task_id | *int | optional | Task ID that created this artifact |
mythic_update_artifact¶
Update an existing artifact's properties
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
artifact_id | int | required | ID of the artifact to update |
host | *string | optional | New hostname |
mythic_delete_artifact¶
Delete (resolve) an artifact by marking it as resolved and no longer needing cleanup. This is a soft delete since Mythic does not support hard artifact deletion.
Parameters¶
| Parameter | Type | Required | Description |
|---|---|---|---|
artifact_id | int | required | ID of the artifact to delete |