Netskope Threat Labs

MALWARE-BACKDOOR Cobalt Strike beacon connection attempt

IPS-SWG

1 SID: 56614

Detects beaconing activity from a compromised host tied to the Cobalt Strike post-exploitation framework.