6
0
mirror of https://github.com/avast/ioc synced 2024-06-30 02:31:23 +00:00
ioc-collection/CobaltStrike/README.md

11 lines
497 B
Markdown
Raw Normal View History

2021-07-07 23:31:29 +00:00
# Cobalt Strike tools and yara rules
More technical informations at <https://decoded.avast.io/threatintel/decoding-cobalt-strike-understanding-payloads/>
### Table of Contents
2021-07-07 23:34:34 +00:00
* [api_hashes](api_hashes) - API hash generator, win10 hash list
2021-07-07 23:35:11 +00:00
* [checksum8](checksum8) - checksum8 generator, request query list
* [ida_scripts](ida_scripts) - IDAPython helper scripts
* [payload_tools](payload_tools) - extractor and parser for payloads
* [yara_rules](yara_rules) - CS hunting yara rules