Netskope Threat Labs

ET MALWARE Observed Cobalt Strike User-Agent

IPS-SWG

1 SID: 2032951

Detects traffic identifying the implant by its user agent tied to the Observed Cobalt Strike post-exploitation framework.