7 pages
C2, Evasion & Host Detection
Running C2 and staying quiet: beaconing, Cobalt Strike, AMSI/ETW evasion, and the Sysmon/Sigma detection they're built against.
Page Kind Tags Updated
Beaconing
C2 traffic and its detection
AMSI
Antimalware Scan Interface
ETW
Event Tracing for Windows
Cobalt Strike
the red-team C2 framework
Meterpreter
the post-exploitation payload
Sysmon
the host telemetry standard)
Sigma
the vendor-agnostic detection rule language
7 pages in this section