Netskope Threat Labs

ET MALWARE Cobalt Strike Activity (GET)

IPS-SWG

2 SIDs: 2034402, 2035370

Detects malicious activity tied to the Cobalt Strike post-exploitation framework.