Cobalt Strike Staging and Extracting Configuration Information
This post covers how Cobalt Strike staging works, how to replicate a staging request to obtain beacon shellcode, and then how to extract the Cobalt Strike config from the shellcode.
Digging into the System Resource Usage Monitor (SRUM)
Uncovering history with Velociraptor
sigma/rules at master · SigmaHQ/sigma
Generic Signature Format for SIEM Systems. Contribute to SigmaHQ/sigma development by creating an account on GitHub.