Cobalt Strike is a legitimate, commercial penetration testing tool mostly used by red teams and for security trainings. However, it is widely used as cracked by threat actors for intrusion and lateral movement in their victims’ networks. Google Cloud has released some open source YARA rules for detecting Cobalt StrikeContinue Reading