Click here to download all references as Bib-File.
| 2023-04-28 ⋅ Twitter (@MichalKoczwara) ⋅ Tweet on hunting BRC4 infrastructure Brute Ratel C4 |
| 2022-09-01 ⋅ Medium michaelkoczwara ⋅ Hunting C2/Adversaries Infrastructure with Shodan and Censys Brute Ratel C4 Cobalt Strike Deimos GRUNT IcedID Merlin Meterpreter Nighthawk PoshC2 Sliver |
| 2022-03-31 ⋅ Medium michaelkoczwara ⋅ LAPSUS$ TTP’s |
| 2021-09-12 ⋅ Medium michaelkoczwara ⋅ Mapping and Pivoting from Cobalt Strike C2 Infrastructure Attributed to CVE-2021-40444 Cobalt Strike |
| 2021-09-07 ⋅ Medium michaelkoczwara ⋅ Cobalt Strike C2 Hunting with Shodan Cobalt Strike |
| 2021-09-02 ⋅ Medium michaelkoczwara ⋅ Cobalt Strike PowerShell Payload Analysis Cobalt Strike |
| 2021-08-17 ⋅ Medium michaelkoczwara ⋅ Cobalt Strike Hunting — DLL Hijacking/Attack Analysis Cobalt Strike |
| 2021-07-22 ⋅ Medium michaelkoczwara ⋅ Cobalt Strike Hunting — simple PCAP and Beacon Analysis Cobalt Strike |