CobaltStrikeScan – Scan Files Or Process Memory For CobaltStrike Beacons And Parse Their Configuration
Scan documents or procedure memory for Cobalt Strike beacons and parse their configuration. CobaltStrikeScan scans Home windows procedure memory for proof of DLL injection (vintage or reflective injection) and performs a YARA scan on...