Skip to content

fix(docs): correct misleading implant cleanup statement across third-party executors (#290)#291

Merged
savacano28 merged 13 commits intomainfrom
copilot/fix-docs-executors-implants-statement
May 7, 2026
Merged

fix(docs): correct misleading implant cleanup statement across third-party executors (#290)#291
savacano28 merged 13 commits intomainfrom
copilot/fix-docs-executors-implants-statement

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 4, 2026

The docs incorrectly claimed implant directories are "deleted on assets' restart" — a client confirmed runtimes/ and payloads/ persist indefinitely after restart, contradicting this.

Changes

docs/deployment/ecosystem/executors.md

Replaced the inaccurate single-sentence cleanup claim in all four third-party executor sections (Tanium, CrowdStrike, SentinelOne, Palo Alto Cortex) with a structured bullet list:

  • Each implant directory is unique per inject.
  • Old implants are periodically cleaned up by the OpenAEV platform based on the clean-implant-interval configuration parameter (default: 8 hours).
  • This cleanup is performed server-side — implant directories are not automatically deleted on endpoint restart.

The clean-implant-interval parameter already existed in each executor's config table but was never referenced in the prose.

docs/usage/openaev-agent.md

Expanded the bare "Execution cleanup and directory pruning" feature bullet into sub-bullets covering:

  • Agent-side pruning of runtimes/implant-XXXXX on implant process exit
  • payloads/ directory cleanup after payload delivery
  • Edge case: residual directories when the agent is offline or a process is killed externally, with the server-side clean-implant-interval sweep as the fallback

PR

Closes: #290

Copilot AI linked an issue May 4, 2026 that may be closed by this pull request
Copilot AI changed the title [WIP] Fix misleading implants cleanup statement in executors documentation fix(docs): correct misleading implant cleanup statement across third-party executors May 4, 2026
Copilot AI requested a review from RomuDeuxfois May 4, 2026 07:08
@RomuDeuxfois RomuDeuxfois marked this pull request as ready for review May 4, 2026 09:11
@RomuDeuxfois RomuDeuxfois force-pushed the copilot/fix-docs-executors-implants-statement branch 2 times, most recently from c8e59d8 to 4bcbf9b Compare May 4, 2026 11:34
@savacano28 savacano28 requested review from RomuDeuxfois and heditar May 7, 2026 08:58
@savacano28 savacano28 force-pushed the copilot/fix-docs-executors-implants-statement branch from 8425357 to 83cd0d6 Compare May 7, 2026 11:20
Comment thread docs/deployment/ecosystem/executors.md Outdated
Comment thread docs/usage/openaev-agent.md
@savacano28
Copy link
Copy Markdown
Contributor

@heditar I made the changes! ty!

Comment thread docs/deployment/ecosystem/executors.md Outdated
Comment thread docs/deployment/ecosystem/executors.md Outdated
Comment thread docs/deployment/ecosystem/executors.md Outdated
Comment thread docs/deployment/ecosystem/executors.md Outdated
Comment thread docs/deployment/ecosystem/executors.md Outdated
Comment thread docs/deployment/ecosystem/executors.md Outdated
@savacano28 savacano28 changed the title fix(docs): correct misleading implant cleanup statement across third-party executors fix(docs): correct misleading implant cleanup statement across third-party executors (#290) May 7, 2026
@savacano28 savacano28 self-assigned this May 7, 2026
@savacano28 savacano28 modified the milestones: Bugs backlog, Next Minor May 7, 2026
@savacano28 savacano28 merged commit 5a35a3b into main May 7, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[docs] fix(executors): correct misleading implant cleanup statement

4 participants