Hi,
Do you know how to find the hashes that correspond to Cobalt Strike servers, the source they came from?
If we suppose that entity A steals Cobalt Strike from entity B, is this visible on A's server? And if we suppose that an entity does not use a single server but several, can we identify all of an attacker's Cobalt Strike servers?
howmp
commented
2 years ago
Hi, Do you know how to find the hashes that correspond to Cobalt Strike servers, the source they came from?
If we suppose that entity A steals Cobalt Strike from entity B, is this visible on A's server? And if we suppose that an entity does not use a single server but several, can we identify all of an attacker's Cobalt Strike servers?
Thanks for your help :)