What are the two communication templates for Grunt and how do they differ?
Grunt supports two templates: GruntHTTP and GruntSMB. GruntHTTP communicates with the C2 server using HTTP, establishing a reverse connection. GruntSMB uses named pipes for peer-to-peer communication between Grunts without directly contacting the C2 server, making it useful for internal network propagation. Operators can activate a GruntSMB by using the 'Connect' task from another Grunt. For more, see the [Covenant Utilization Analysis](/news/covenant-utilization-analysis).
Related article:
Covenant Utilization Analysis