Finding Beacons In The Dark - A Guide To Stopping Cobalt Strike Attacks

Cobalt Strike (CS) is the most widely used advanced adversary simulation and threat emulation software. It's very powerful, for both good and bad actors. CS delivers a post-exploitation framework that was developed to emulate the greatest features of late-stage malware ecosystems and allow its users to simulate adversary actions. The adoption of Cobalt Strike by global threat actors, and the framework’s use in hundreds of genuine intrusions, ransoms, and data breaches, shows that Beacon has fought its way to the top. It currently sits on the throne as the reigning champ of all malware toolkits. If it works, it wins. In this session, you will learn: • How security and threat intelligence community can proactively prevent their organisations from falling victim to the growing threat of Cobalt Strike Beacons and Team Servers. • How to turn the tables on APT groups and malicious threat actors - become the hunter instead of the hunted.