1.The Complete Guide to Hunting Cobalt Strike - Part 4: Operationalizing C2 Feeds with API Automationblog | 2026-03-03 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #threat-detection | #detection-engineering
2.The Complete Guide to Hunting Cobalt Strike - Part 3: Automated C2 Infrastructure Discoveryblog | 2026-01-06 00:00 | hunt.io | Original ↗ | .md | #threat-detection | #threat-hunting | #c2
3.The Complete Guide to Hunting Cobalt Strike - Part 2: 10+ HuntSQL Recipes to Find Cobalt Strikeblog | 2025-11-19 00:00 | hunt.io | Original ↗ | .md | #threat-detection | #threat-hunting | #c2
4.The Complete Guide to Hunting Cobalt Strike – Part 1: Detecting in Open Directoriesblog | 2025-11-13 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #cobalt-strike
5.Certified Red Team Operator Certificate Reviewblog | 2025-07-10 09:10 | labs.cognisys.group | Original ↗ | .md | #active-directory | #certification | #red-team
6.Cobalt Strike Operators Leverage PowerShell Loaders Across Chinese, Russian, and Global Infrastructureblog | 2025-06-19 00:00 | hunt.io | Original ↗ | .md | #cloud | #c2 | #powershell
7.2025 Red Team Tools – C2 Frameworks, Active Directory & Network Exploitationblog | 2025-06-04 00:00 | bishopfox.com | Original ↗ | .md | #active-directory | #red-team | #c2
8.Pass the Hash Attack Explainedblog | 2025-04-09 05:37 | semperis.com | Original ↗ | .md | #active-directory | #credential-theft | #privilege-escalation
9.The Things We Think and Do Not Say: The Future of Our Beacon Object Files (BOFs)blog | 2025-03-19 00:00 | netspi.com | Original ↗ | .md | #red-team | #c2 | #cobalt-strike
10.South Korean Organizations Targeted by Cobalt Strike ‘Cat’ Delivered by a Rust Beaconblog | 2025-03-18 00:00 | hunt.io | Original ↗ | .md | #rust | #threat-hunting | #cobalt-strike
11.Golang Beacons and VS Code Tunnels: Tracking a Cobalt Strike Server Leveraging Trusted Infrastructureblog | 2025-01-07 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #golang
12.Rare Watermark Links Cobalt Strike 4.10 Team Servers to Ongoing Suspicious Activityblog | 2024-12-03 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #phishing | #cobalt-strike
13.Tricks, Treats, and Threats: Cobalt Strike & the Goblin Lurking in Plain Sightblog | 2024-10-31 00:00 | hunt.io | Original ↗ | .md | #credential-theft | #phishing | #cobalt-strike
14.Introducing Code Search on AttackCapture: Uncover Exploit Code, Reverse Shells, C2 Configs, and Moreblog | 2024-10-15 00:00 | hunt.io | Original ↗ | .md | #product-update | #threat-hunting | #reverse-shell
15.Decoy Manuals and Malicious Browser Extensions: A Closer Look at a Multi-Layered Threatblog | 2024-09-10 00:00 | hunt.io | Original ↗ | .md | #malware | #browser-extension | #spyware
16.Geacon and Geacon_Pro: A Constant Menace to Linux and Windows Systemsblog | 2024-06-27 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #cobalt-strike | #tls-certificates
17.In Plain Sight: Uncovering SuperShell & Cobalt Strike from an Open Directoryblog | 2024-04-16 00:00 | hunt.io | Original ↗ | .md | #linux | #c2 | #cobalt-strike
18.A Hunt How-To: Detecting RedGuard C2 Redirectorblog | 2024-04-02 00:00 | hunt.io | Original ↗ | .md | #blue-team | #c2 | #detection
19.A Treasure Trove of Trouble: Open Directory Exposes Red Team Toolsblog | 2024-03-21 00:00 | hunt.io | Original ↗ | .md | #red-team | #bloodhound | #opsec
20.Introducing Hunt Advanced Searchblog | 2024-01-30 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #cobalt-strike | #sliver
21.Discovering & Disrupting Malicious Infrastructureblog | 2023-09-12 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #cobalt-strike | #tls-certificates
22.Malware development part 8 - COFF injection and in-memory executionblog | 2021-03-16 00:00 | 0xpat.github.io | Original ↗ | .md | #red-team | #code-injection | #cobalt-strike