- Upgrade to Windows 11 Pro for $18 - new low price
- Buy a Microsoft Visual Studio Pro license for $30 - the lowest price we've seen
- One of the best Mini LED TVs I've tested is not made by Samsung or TCL (and it's on sale)
- One of the best Android smartwatches I've tested is not by Samsung or Google
- Get 74% off a Babbel subscription to learn a new language now
FireEye Breach Detection Guidance – Cisco Blogs
Cyber security firm FireEye recently disclosed an incident that was reported to have resulted in the inadvertent disclosure of various internally developed offensive security tools (OSTs) that were used across FireEye red-team engagements.
Some of these tools appear to be based on well-known offensive frameworks like Cobalt Strike. This is even evident in the naming convention used in the coverage designated by FireEye.
The use of Cobalt Strike beacons is popular among red teams and adversaries. In 2020, Cisco Talos released a research paper detailing the large amount of coverage for the Cobalt Strike framework. We have concluded the coverage is still applicable and can reliably detect FireEye red team beacons and other activity.
Share: