Using a combination of host and network-based detection methods and expert analysis, Recorded Future’s Insikt Group completed a deep technical profile of the commercial post-exploitation framework,
Cobalt Strike.
Cobalt Strike is a tool designed to aid penetration testers and red team operators in conducting authorized intrusions. Despite its original goal, since its release in 2012, Cobalt Strike has gained widespread popularity among state-sponsored threat actors and financially motivated threat actors.
To learn more, hear the Insikt Group analysts talk about the history of Cobalt Strike, its technical specifications, detection and response strategies, and their research methodology.
