BigHugger
sk Skill · meltedinhex

hunting-cobalt-strike-traffic

Hunts for Cobalt Strike beacon traffic by detecting default stager URI checksum8 values, default Malleable C2 profile artifacts, and default ports/named pipes in HTTP and process telemetry. Activates for requests to hunt Cobalt Strike, detect beacon stager URIs, or find default Malleable C2 indicators.

installs 8w
0
30-day movement
starts with the next reading
Related entries
1
Connections
0
bashPythonnetwork-detectionc2cobalt-strikebeaconthreat-hunting
Host repository
meltedinhex/analyst-ai-pack
Version
1.0.0
Licence
Apache-2.0
Host stars
22
Host language
Python