Description
Detects data exfiltration to operator infrastructure tied to the Cobalt Strike ScreenShot post-exploitation framework.
Related malware families
Related blogs
ET MALWARE Cobalt Strike ScreenShot Exfil (POST)
IPS-SWG
1 SID: 2065231
1 SID: 2065231
Detects data exfiltration to operator infrastructure tied to the Cobalt Strike ScreenShot post-exploitation framework.