Merge branch 'copyediting' into develop

docs/content/FAQ/_index.md

@@ -5,7 +5,7 @@ draft: false
 pre: "<i class='fas fa-question'></i> "
 ---
 
-Here are some of the most common questions we receive about the Infection Monkey. If the answer you’re looking for isn’t here, talk with us [on our Slack channel](https://infectionmonkey.slack.com/join/shared_invite/enQtNDU5MjAxMjg1MjU1LWM0NjVmNWE2ZTMzYzAxOWJiYmMxMzU0NWU3NmUxYjcyNjk0YWY2MDkwODk4NGMyNDU4NzA4MDljOWNmZWViNDU), email us at [[email protected]](mailto:[email protected]) or [open an issue on GitHub](https://github.com/guardicore/monkey).
+Here are some of the most common questions we receive about the Infection Monkey. If the answer you're looking for isn't here, talk with us [on our Slack channel](https://infectionmonkey.slack.com/join/shared_invite/enQtNDU5MjAxMjg1MjU1LWM0NjVmNWE2ZTMzYzAxOWJiYmMxMzU0NWU3NmUxYjcyNjk0YWY2MDkwODk4NGMyNDU4NzA4MDljOWNmZWViNDU), email us at [[email protected]](mailto:[email protected]) or [open an issue on GitHub](https://github.com/guardicore/monkey).
 
 - [Where can I get the latest Monkey version? 📰](#where-can-i-get-the-latest-monkey-version)
 - [How long does a single Monkey run for? Is there a time limit?](#how-long-does-a-single-monkey-run-for-is-there-a-time-limit)
@@ -17,11 +17,11 @@ Here are some of the most common questions we receive about the Infection Monkey
   - [Monkey agent](#monkey-agent)
 - [Running the Monkey in a production environment](#running-the-monkey-in-a-production-environment)
   - [How much of a footprint does the Monkey leave?](#how-much-of-a-footprint-does-the-monkey-leave)
-  - [What’s the Monkey’s impact on system resources usage?](#whats-the-monkeys-impact-on-system-resources-usage)
-  - [Is it safe to use real passwords and usernames in the Monkey’s configuration?](#is-it-safe-to-use-real-passwords-and-usernames-in-the-monkeys-configuration)
+  - [What's the Monkey's impact on system resources usage?](#whats-the-monkeys-impact-on-system-resources-usage)
+  - [Is it safe to use real passwords and usernames in the Monkey's configuration?](#is-it-safe-to-use-real-passwords-and-usernames-in-the-monkeys-configuration)
   - [How do you store sensitive information on Monkey Island?](#how-do-you-store-sensitive-information-on-monkey-island)
   - [How stable are the exploitations used by the Monkey? Will the Monkey crash my systems with its exploits?](#how-stable-are-the-exploitations-used-by-the-monkey-will-the-monkey-crash-my-systems-with-its-exploits)
-- [After I’ve set up Monkey Island, how can I execute the Monkey?](#after-ive-set-up-monkey-island-how-can-i-execute-the-monkey)
+- [After I've set up Monkey Island, how can I execute the Monkey?](#after-ive-set-up-monkey-island-how-can-i-execute-the-monkey)
 - [How can I make the monkey propagate “deeper” into the network?](#how-can-i-make-the-monkey-propagate-deeper-into-the-network)
 - [The report returns a blank screen](#the-report-returns-a-blank-screen)
 - [How can I get involved with the project? 👩‍💻👨‍💻](#how-can-i-get-involved-with-the-project)
@@ -77,7 +77,7 @@ The Monkey performs queries out to the Internet on two separate occasions:
 
 ### Monkey Island
 
-The Monkey Island’s log file can be downloaded directly from the UI. Click the “log” section and choose “Download Monkey Island internal logfile”, like so:
+The Monkey Island's log file can be downloaded directly from the UI. Click the “log” section and choose “Download Monkey Island internal logfile”, like so:
 
 ![How to download Monkey Island internal log file](/images/faq/download_log_monkey_island.png "How to download Monkey Island internal log file")
 
@@ -98,7 +98,7 @@ The Monkey log file can be found in the following paths on machines where it was
 - Path on Linux: `/tmp/user-1563`
 - Path on Windows: `%temp%\\~df1563.tmp`
 
-The logs contain information about the internals of the Monkey’s execution. The log will contain entries like these ones for example:
+The logs contain information about the internals of the Monkey's execution. The log will contain entries like these ones for example:
 
 ```log
 2019-07-22 19:16:44,228 [77598:140654230214464:INFO] main.main.116: >>>>>>>>>> Initializing monkey (InfectionMonkey): PID 77598 <<<<<<<<<<
@@ -124,31 +124,31 @@ The Monkey leaves hardly any trace on the target system. It will leave:
   - Path on Linux: `/tmp/user-1563`
   - Path on Windows: `%temp%\\~df1563.tmp`
 
-### What’s the Monkey’s impact on system resources usage?
+### What's the Monkey's impact on system resources usage?
 
 The Infection Monkey uses less than single-digit percent of CPU time and very low RAM usage. For example, on a single-core Windows Server machine, the Monkey consistently uses 0.06% CPU, less than 80MB of RAM and a small amount of I/O periodically.
 
 If you do experience any performance issues please let us know on [our Slack channel](https://infectionmonkey.slack.com/) or via [opening an issue on GitHub](https://github.com/guardicore/monkey).
 
-### Is it safe to use real passwords and usernames in the Monkey’s configuration?
+### Is it safe to use real passwords and usernames in the Monkey's configuration?
 
 Absolutely! User credentials are stored encrypted in the Monkey Island server. This information is then accessible only to users that have access to the Island.
 
 We advise to limit access to the Monkey Island server by following our [password protection guide](../usage/island/password-guide).
 
 ### How do you store sensitive information on Monkey Island?
 
-Sensitive data such as passwords, SSH keys and hashes are stored on the Monkey Island’s database in an encrypted fashion. This data is transmitted to the Infection Monkeys in an encrypted fashion (HTTPS) and is not stored locally on the victim machines.
+Sensitive data such as passwords, SSH keys and hashes are stored on the Monkey Island's database in an encrypted fashion. This data is transmitted to the Infection Monkeys in an encrypted fashion (HTTPS) and is not stored locally on the victim machines.
 
 When you reset the Monkey Island configuration, the Monkey Island wipes the information.
 
 ### How stable are the exploitations used by the Monkey? Will the Monkey crash my systems with its exploits?
 
 The Monkey does not use any exploits or attacks that may impact the victim system.
 
-This means we avoid using some very strong (and famous) exploits such as [EternalBlue](https://www.guardicore.com/2017/05/detecting-mitigating-wannacry-copycat-attacks-using-guardicore-centra-platform/). This exploit was used in WannaCry and NotPetya with huge impact. But because it may crash a production system, we aren’t using it.
+This means we avoid using some very strong (and famous) exploits such as [EternalBlue](https://www.guardicore.com/2017/05/detecting-mitigating-wannacry-copycat-attacks-using-guardicore-centra-platform/). This exploit was used in WannaCry and NotPetya with huge impact. But because it may crash a production system, we aren't using it.
 
-## After I’ve set up Monkey Island, how can I execute the Monkey?
+## After I've set up Monkey Island, how can I execute the Monkey?
 
 See our detailed [getting started](../content/usage/getting-started) guide.
 
@@ -175,6 +175,6 @@ The Monkey is an open-source project, and we weclome contributions and contribut
 
 ### How did you come up with the Infection Monkey?
 
-Oddly enough, the idea of proactively breaking the network to test its survival wasn’t born in the security industry. In 2011, the streaming giant Netflix released Chaos Monkey, a tool that was designed to randomly disable the company’s production servers to verify they could survive network failures without any customer impact. Netflix's Chaos Monkey became a popular network resilience tool, breaking the network in a variety of failure modes, including connectivity issues, invalid SSL certificates and randomly deleting VMs.
+Oddly enough, the idea of proactively breaking the network to test its survival wasn't born in the security industry. In 2011, the streaming giant Netflix released Chaos Monkey, a tool that was designed to randomly disable the company's production servers to verify they could survive network failures without any customer impact. Netflix's Chaos Monkey became a popular network resilience tool, breaking the network in a variety of failure modes, including connectivity issues, invalid SSL certificates and randomly deleting VMs.
 
 Inspired by this concept, Guardicore Labs developed its own attack simulator - Infection Monkey - to run non-intrusively within existing production environments. The idea was to test the resiliency of modern data centers against attack and give security teams the insights they need to make informed decisions and enforce tighter security policies. Since its launch in 2017 (?) the Infection Monkey has been used by hundreds of information technology teams from across the world to find weaknesses in their on-premises and cloud-based data centers.

docs/content/reports/mitre.md

@@ -24,11 +24,11 @@ The MITRE ATT&CK report is centred around the ATT&CK matrix:
 The Monkey rates your network on the attack techniques it attempted. For each technique, you can get
 
 - {{< label danger Red >}}: The Monkey **successfully used** the technique in the simulation. That means your network is vulnerable to this technique being employed.
-- {{< label warning Yellow >}}: The Monkey **tried to use** the technique, but didn’t manage to. That means your network isn’t vulnerable to the way Monkey employs this technique.
+- {{< label warning Yellow >}}: The Monkey **tried to use** the technique, but didn't manage to. That means your network isn't vulnerable to the way Monkey employs this technique.
 - {{< label unused "Dark Gray" >}}: The Monkey **didn't try** the technique. Perhaps it wasn't relevant to this network.
 - {{< label disabled "Light Gray" >}}: The Monkey **didn't try** the technique since it wasn't configured.
 
-Then, you can see exactly HOW the technique was used in this attack, and also what you should do to mitigate it, by clicking on the technique and seeing the details. For example, let’s look at the [**Brute Force**](https://attack.mitre.org/techniques/T1110/) technique that’s a part of employing the [**Credentials Access**](https://attack.mitre.org/tactics/TA0006/) tactic:
+Then, you can see exactly HOW the technique was used in this attack, and also what you should do to mitigate it, by clicking on the technique and seeing the details. For example, let's look at the [**Brute Force**](https://attack.mitre.org/techniques/T1110/) technique that's a part of employing the [**Credentials Access**](https://attack.mitre.org/tactics/TA0006/) tactic:
 
 ![MITRE Report Credentials Access technique](/images/usage/reports/mitre-report-cred-access.png "MITRE Report Credentials Access technique")
 

docs/content/reports/zero-trust.md

@@ -13,10 +13,10 @@ The Guardicore Infection Monkey runs different tests to evaluate your network ad
 
 ## Summary
 
-This diagram provides a quick glance at how your organization scores on each component of the Forrester’s Zero Trust model with **Failed**, **Verify**, **Passed** and **Unexecuted** verdicts.
+This diagram provides a quick glance at how your organization scores on each component of the Forrester's Zero Trust model with **Failed**, **Verify**, **Passed** and **Unexecuted** verdicts.
 
 - {{< label danger Failed >}} At least one of the tests related to this component failed. This means that the Infection Monkey detected an unmet Zero Trust requirement.
-- {{< label warning Verify >}} At least one of the tests’ results related to this component requires further manual verification.
+- {{< label warning Verify >}} At least one of the tests' results related to this component requires further manual verification.
 - {{< label success Passed >}} All Tests related to this pillar passed. No violation of a Zero Trust guiding principle was detected.
 - {{< label unused Unexecuted >}} This status means no tests were executed for this pillar.
 

docs/content/setup/_index.md

@@ -9,18 +9,18 @@ tags = ["setup"]
 
 # Setting up Infection Monkey
 
-Setting up Infection Monkey is really easy! First, you need to {{% button href="https://infectionmonkey.com/" icon="fas fa-download" %}}download the Infection Monkey from our site{{% /button %}}.
+Setting up the Infection Monkey is easy! First, you need to {{% button href="https://infectionmonkey.com/" icon="fas fa-download" %}}Download the Infection Monkey{{% /button %}}.
 
-Once you've downloaded an installer, you can follow the relevant guide for your environment:
+Once you've downloaded an installer, follow the relevant guide for your environment:
 
 {{% children %}}
 
-Once you're done setting the Monkey up, check out our [Getting Started](../usage/getting-started) guide!
+After setting the Monkey up, check out our [Getting Started](../usage/getting-started) guide!
 
 {{% notice tip %}}
 You can find information about [operating system compatibility and support here](../reference/operating_systems_support).
 {{% /notice %}}
 
 {{% notice tip %}}
-You can find the binary checksums of our installers to verify their integrity [in this page](../usage/file-checksums).
-{{% /notice %}}
+You can find the binary checksums of our installers to verify their integrity [on this page](../usage/file-checksums).
+{{% /notice %}}

docs/content/setup/accounts-and-security.md

@@ -7,15 +7,17 @@ pre: "<i class='fas fa-user-lock'></i> "
 tags: ["usage", "password"]
 ---
 
-## Security in Infection Monkey
+## Security in the Infection Monkey
 
-The first time you launch Monkey Island (Infection Monkey CC server), you'll be prompted to create an account and secure your island. After your account is created, the server will only be accessible via the credentials you chose.
+The first time you launch Monkey Island (the Infection Monkey CC server), you'll be prompted to create an account and secure your island. After account creation, the server will only be accessible via the credentials you entered.
 
-If you want island to be accessible without credentials press *I want anyone to access the island*. Please note that this option is insecure: you should only pick this for use in development environments.
+If you want an island to be accessible without credentials, press *I want anyone to access the island*. Please note that this option is insecure, and you should only use it in development environments.
 
-## Resetting account credentials
+## Resetting your account credentials
 
-To reset credentials edit `monkey_island\cc\server_config.json` by deleting `user` and `password_hash` variables. Then restart the Monkey Island server and you should be prompted with registration form again.
+To reset your credentials, edit `monkey_island\cc\server_config.json` by deleting the `user` and `password_hash` variables. 
+
+When you restart the Monkey Island server, you will again be prompted with the registration form.
 
 Example `server_config.json` for account reset:
 

docs/content/setup/aws.md

@@ -4,36 +4,46 @@ date: 2020-05-26T20:57:36+03:00
 draft: false
 pre: '<i class="fab fa-aws"></i> '
 weight: 5
-tags: ["setup", "aws"] 
+tags: ["setup", "aws"]
 ---
 
 ## Deployment
 
-On the [Infection Monkey’s AWS Marketplace page](https://aws.amazon.com/marketplace/pp/GuardiCore-Infection-Monkey/B07B3J7K6D), click **Continue to Subscribe**.
+On the [Infection Monkey's AWS Marketplace page](https://aws.amazon.com/marketplace/pp/GuardiCore-Infection-Monkey/B07B3J7K6D), click **Continue to Subscribe**.
 
 1. Choose the desired region.
-1. Choose an EC2 instance type with at least 1GB of RAM for optimal performance or stick with the recommended.
-1. Select the VPC and subnet you want the instance to be in.
+1. Choose an EC2 instance type with at least 1GB of RAM for optimal performance or stick with the default recommendation.
+1. Select the VPC and subnet you want to use for the new instance.
 1. In the Security Group section, make sure ports 5000 and 5001 on the machine are accessible for inbound TCP traffic.
-1. Choose an existing EC2 key pair for authenticating with your new instance.
+1. Choose an existing EC2 key pair for authenticating with the new instance.
 1. Click **Launch with 1-click.**
 
-At this point, AWS will instance and deploy your new machine.
+At this point, AWS will instance and deploy the new machine.
 
-When ready, you can browse to  the Infection Monkey running on your fresh deployment at:
+When ready, you can browse to the Infection Monkey running on the fresh deployment at:
 
 `https://{public-ip}:5000`
 
-You will be presented a login page. Use the username **monkey**, and the new EC2 instace’s instance ID for password. You can find the instance id by going to the EC2 console and selecting your instance. It should appear in the details pane below.
+You will be presented with a login page. Enter the username **monkey**, and the
+new EC2 instance's **instance ID** for your password. To find your instance ID,
+go to the EC2 console and select your instance. It should appear in the details
+pane below.
 
 ![AWS instance ID](../../images/setup/aws/aws-instance-id.png "AWS instance ID")
 
 ## Integration with AWS services
 
-The Monkey has built-in integrations with AWS services for better execution and reporting. See [Usage -> Integrations](../../usage/integrations) for more details.
+The Infection Monkey has built-in integrations with AWS services for better
+execution and reporting. See [Usage -> Integrations](../../usage/integrations)
+for more details.
 
 ## Upgrading
 
-Currently there's no "upgrade-in-place" option when a new version comes out. To get the new version, you can deploy a new machine from the marketplace. If you'd like to keep your existing configuration, you can export it to a file by using the Export button and then import it to the new Monkey Island.
+
+Currently, there's no "upgrade-in-place" option when a new version is released.
+To get an updated version, you can deploy a new machine from the marketplace.
+
+If you'd like to keep your existing configuration, you can export it to a file
+using the *Export config* button and then import it to the new Monkey Island.
 
 ![Export configuration](../../images/setup/export-configuration.png "Export configuration")