GENERAL__2020__2020.09.11_Talos_-_The_art_and_science_of_detecting_Cobalt_Strike.pdf
ID: b2aa51e0-55bb-4bcd-b0ef-758f1dc5554b
STIX ID: report--b2aa51e0-55bb-4bcd-b0ef-758f1dc5554b
Threat Score
70/100
Uploaded: 2026-08-19
Published Date: 2020-09-11
Last Modified Date: 2020-09-11
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
This report presents a comprehensive Talos analysis of the Cobalt Strike attack framework, detailing its beacon types and payload delivery methods (web delivery, HTML applets, HTA, Java applets, and staged/stageless executables), operation flow (C2 communication, tasking, and callbacks), and extensive detection guidance with multiple Snort and ClamAV signatures, aimed at enabling defenders to identify and mitigate Cobalt Strike campaigns.