
BeaconHunter
Detect and respond to Cobalt Strike beacons using ETW.
defensive-toolsincident-responsemalware-analysis+1
516

Detect and respond to Cobalt Strike beacons using ETW.

Scan files or process memory for CobaltStrike beacons and parse their configuration