Cobalt Strike (まとめ)

malware-log.hatenablog.com

【目次】

概要

【辞書】

◆Cobalt Strike (Wikipedia)
https://de.wikipedia.org/wiki/Cobalt_Strike

◆Cobalt Strike (Malpedia)
https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike

【ポータルサイト】

◆Cobalt Strike (CobaltStrike)
https://www.cobaltstrike.com/

【Yara Rules】

◆Cobalt Strike (Malpedia)
https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike
⇒ https://malpedia.caad.fkie.fraunhofer.de/yara/win.cobalt_strike

【最新情報】

◆Winnti hackers split Cobalt Strike into 154 pieces to evade detecti (BleepingComputer, 2022/08/18 11:48)
[WinntiのハッカーはCobalt Strikeを154個に分割して検知を回避]
https://www.bleepingcomputer.com/news/security/winnti-hackers-split-cobalt-strike-into-154-pieces-to-evade-detection/
⇒ https://security-tools.hatenablog.com/entry/2022/08/18/000000

記事

【ニュース】

◆Ransomware attacks need less than four days to encrypt systems (BleepingComputer, 2022/06/01 07:32)
[ランサムウェアの攻撃は、システムを暗号化するのに4日以内が必要]
https://www.bleepingcomputer.com/news/security/ransomware-attacks-need-less-than-four-days-to-encrypt-systems/
⇒ https://security-tools.hatenablog.com/entry/2022/06/01/000000

◆Winnti hackers split Cobalt Strike into 154 pieces to evade detecti (BleepingComputer, 2022/08/18 11:48)
[WinntiのハッカーはCobalt Strikeを154個に分割して検知を回避]
https://www.bleepingcomputer.com/news/security/winnti-hackers-split-cobalt-strike-into-154-pieces-to-evade-detection/
⇒ https://security-tools.hatenablog.com/entry/2022/08/18/000000

【公開情報】

◆Cobalt Strike Beaconを検知するVolatility Plugin(2018-07-31) (JPCERT/CC, 2018/07/31)
https://www.jpcert.or.jp/magazine/acreport-cobaltstrike.html

【関連情報】

◆Cobalt Strike (まとめ) [TT Malware-Log]
https://malware-log.hatenablog.com/entry/Cobalt_Strike

関連情報

【関連まとめ記事】

◆全体まとめ

◆ラテラルムーブメントツール (まとめ)
https://security-tools.hatenablog.com/entry/Lateral_Movement_Tools