Jake Smith
Jake Smith
```cmd .\BLUESPAWN-client-x64.exe --monitor -a Cursory ____ ____ ____ ____ ____ ____ ____ ____ ____ ||B ||||L ||||U ||||E ||||S ||||P ||||A ||||W ||||N || ||__||||__||||__||||__||||__||||__||||__||||__||||__|| |/__\||/__\||/__\||/__\||/__\||/__\||/__\||/__\||/__\| [*][LOW] Monitoring the system...
Need to draft a good default config too or decide to rely on another open source project like Olaf's awesome sysmon-modular
This was previously in the codebase but the actual calls to see if a cobalt strike beacon was active seem to have been removed
[copied from Discord] T1562.004 - https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1562.004/T1562.004.md --> our hunt looks for some registry configurations in the fw that an attacker could use. our hunt is not yet robust enough to...
After a team logs into the scoreboard, it should be very obvious where they can see a black team provided set of information that contains key network / ip info,...